Implement CodeQL Security Scan in workflow

Added CodeQL security scan workflow for Python.
This commit is contained in:
miguelgual2003 2026-01-16 20:24:11 +01:00 committed by GitHub
parent 1b3916120e
commit f9ab0ed8ce
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -75,3 +75,27 @@ jobs:
run: pylinkvalidate.py -P http://localhost:8000/
- run: echo "Done"
codeql:
name: CodeQL Security Scan
runs-on: ubuntu-latest
permissions:
security-events: write
contents: read
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: python
queries: security-and-quality
# Para Python NO hace falta build ni dependencias
# CodeQL analiza el código fuente directamente
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3