mirror of
https://github.com/encode/django-rest-framework.git
synced 2026-02-17 20:50:35 +03:00
Implement CodeQL Security Scan in workflow
Added CodeQL security scan workflow for Python.
This commit is contained in:
parent
1b3916120e
commit
f9ab0ed8ce
24
.github/workflows/main.yml
vendored
24
.github/workflows/main.yml
vendored
|
|
@ -75,3 +75,27 @@ jobs:
|
|||
run: pylinkvalidate.py -P http://localhost:8000/
|
||||
|
||||
- run: echo "Done"
|
||||
|
||||
codeql:
|
||||
name: CodeQL Security Scan
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
permissions:
|
||||
security-events: write
|
||||
contents: read
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Initialize CodeQL
|
||||
uses: github/codeql-action/init@v3
|
||||
with:
|
||||
languages: python
|
||||
queries: security-and-quality
|
||||
|
||||
# Para Python NO hace falta build ni dependencias
|
||||
# CodeQL analiza el código fuente directamente
|
||||
|
||||
- name: Perform CodeQL Analysis
|
||||
uses: github/codeql-action/analyze@v3
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user