As an alternative to running escaneo de código within GitHub, you can perform analysis elsewhere and then upload the results. Alerts for escaneo de código that you run externally are displayed in the same way as those for escaneo de código that you run within GitHub. For more information, see "Managing escaneo de código alerts for your repository."
If you use a third-party static analysis tool that can produce results as Static Analysis Results Interchange Format (SARIF) 2.1.0 data, you can upload this to GitHub. For more information, see "Uploading a SARIF file to GitHub."
Si ejecutas el escaneo de código utilizando configuraciones múltiples, entonces algunas veces una alerta tendrá varios orígenes de análisis. Si una alerta tiene varios orígenes de análisis, puedes ver el estado de la alerta para cada uno de ellos en la página de alertas. Para obtener más información, consulta la sección "Acerca de los orígenes de análisis".
Integrations with webhooks
You can use escaneo de código webhooks to build or set up integrations, such as GitHub Apps or OAuth Apps, that subscribe to escaneo de código events in your repository. For example, you could build an integration that creates an issue on GitHub Enterprise Cloud or sends you a Slack notification when a new escaneo de código alert is added in your repository. For more information, see "Creating webhooks" and "Webhook events and payloads."