自动扫描代码以查找漏洞和错误

您可以在 GitHub 上查找项目代码中的漏洞和错误。

代码扫描 is available if you have a license for GitHub Advanced Security.

About code scanning→

You can use 代码扫描 to find security vulnerabilities and errors in the code for your project on GitHub.

当代码扫描在拉取请求中发现问题时，您可以审查高亮的代码并解决警报。

You can set up 代码扫描 by adding a workflow to your repository.

从安全视图中，您可以查看、修复、或关闭项目代码中潜在漏洞或错误的警报。

You can configure how GitHub scans the code in your project for vulnerabilities and errors.

您可以配置 GitHub 如何使用 CodeQL 分析工作流程扫描用编译语言编写的代码以查找漏洞和错误。

If you're having problems with 代码扫描, you can troubleshoot by using these tips for resolving issues.

通过确保所有进程都在同一容器中运行，您可以在容器中运行代码扫描。