rajbos / rajbos/github-actions-requests
Retrieve CodeQL checks after the workflow is done
Open
@rajbos is already working on this.
Since Nov 4, 2021.
- Dominant language
- JavaScript
- Stars
- 13
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
Steps to retrieve the CodeQL findings from:
- Find the executed CodeQL workflow after injecting it and wait for it to complete. If it fails, inject a comment in the request issue
- List the languages the scan was successful for (at least one should run successfully)
- Find the number of security findings (from the repo I think), see example here
- Show the information as a badge in a new comment of the request issue
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.