自动扫描代码以查找漏洞和错误

您可以使用 代码扫描 在 GitHub 上查找项目中的安全漏洞和代码错误。

When 代码扫描 identifies a problem in a pull request, you can review the highlighted code and resolve the alert.

您可以对项目的仓库启用 代码扫描。

From the security view, you can view, fix, or close alerts for potential vulnerabilities or errors in your project's code.

You can configure how GitHub scans the code in your project for vulnerabilities and errors.

您可以配置 GitHub 如何使用 CodeQL 分析工作流程 扫描用编译语言编写的代码以查找漏洞和错误。

If you're having problems with 代码扫描, you can troubleshoot by using these tips for resolving issues.

You can run 代码扫描 in a container by ensuring that all processes run in the same container.