github / github/roadmap

Improved incremental CodeQL analysis during Pull Requests for Ruby and Java [GA]

Đang mở
#1,158 1 bình luận 0 reaction 0 người được giao Xem trên GitHub
GHES 3.22 GitHub Advanced Security (GHAS) Shipped
Ngôn ngữ chính
Không có dữ liệu ngôn ngữ
Star
8.9k
Fork
1.8k
Chỉ số merge pull request
Không có pull request nào được merge trong 30 ngày

Mô tả

### Value Prop

CodeQL is the static analysis engine that powers GitHub’s code scanning capabilities. In Pull Requests, it can pinpoint potential vulnerabilities and deliver detailed insights alongside automated remediation suggestions through [Copilot Autofix](https://github.blog/news-insights/product-news/secure-code-more-than-three-times-faster-with-copilot-autofix). With this update, CodeQL [queries](https://codeql.github.com/docs/writing-codeql-queries/about-codeql-queries/) and extraction will focus exclusively on newly introduced code rather than rescanning the entire codebase, streamlining the analysis process.

### Expected Outcome

Developers receive even faster feedback during Pull Requests, reducing the time needed to identify and fix emerging vulnerabilities. This speed enhancement aims to make a significant reduction in scan duration with a potential small impact on accuracy on the Pull Requests page. This will help accelerate the remediation process, enabling teams to secure their code more efficiently without slowing down for security.

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.