You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: .github/steps/1-codeql-language-matrix.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,23 +9,23 @@ CodeQL language matrices allow you to configure your CodeQL workflows with a lan
9
9
### Importance of using languages matrices with code scanning
10
10
11
11
1.**Simplicity**: Using a language matrix with CodeQL simplifies your workflow by allowing you to manage multiple languages in a single workflow file. This eliminates the need for separate workflows for each language, making your code scanning process more streamlined and manageable.
12
-
2.**Flexibility**: A language matrix provides flexibility as it allows you to easily add or remove languages from your workflow. This means you can quickly adapt your code scanning process to changes in your project's language usage.
12
+
2.**Flexibility**: A language matrix provides flexibility, as it allows you to easily add or remove languages from your workflow. This means you can quickly adapt your code scanning process to changes in your project's language usage.
13
13
3.**Consistency**: By using a language matrix, you ensure consistent code scanning across all languages used in your project. This helps maintain the quality and security of your codebase, regardless of the language it's written in.
14
14
15
15
Remember, a well-configured CodeQL setup is key to maintaining a secure and reliable codebase.
16
16
17
17
### :keyboard: Activity: Configure your `codeql.yml` file to use a language matrix
18
18
19
-
1.Navigate to the `Code` tab and locate the `.github/workflows` folder.
20
-
1.Add the following content to the `codeql.yml` file before the steps section:
19
+
1.In the `Code` tab, locate the `.github/workflows` folder.
20
+
1.In the `codeql.yml` file, above the `steps` section, add the following:
Copy file name to clipboardExpand all lines: .github/steps/2-codeql-autobuild.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
3
3
_Nice work! :tada: You modified your workflow to use a language matrix!_
4
4
5
-
With the language matrix specified we can see the languages that we want to scan. One of those languages is a compiled language, and as such will not work correctly with how we have the workflow set up. We need to make sure that the autobuild step is included _and_ only runs when it is needed.
5
+
With the language matrix specified we can see the languages we want to scan. One of those languages is a compiled language, and as such, will not work correctly with how we have the workflow set up. We need to make sure the autobuild step is included _and_ only runs when it is needed.
6
6
7
7
Autobuild for CodeQL is a feature that automatically attempts to build any compiled languages in your repository. It works by detecting the build system in your repository and executing the appropriate commands to compile the code, enabling CodeQL to analyze the compiled language.
Copy file name to clipboardExpand all lines: README.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,12 +8,12 @@ _Configure your CodeQL workflows with a language matrix to simplify your code sc
8
8
9
9
## Welcome
10
10
11
-
In this course we will explore how you can configure CodeQL using configuration files. During this course, we will show you how to add a query pack to a CodeQL configuration file as well as configure your workflow to reference that configuration file.
11
+
In this course we will explore how you can configure CodeQL using configuration files. During this course, we will show you how to add a query pack to a CodeQL configuration file, as well as configure your workflow to reference that configuration file.
12
12
13
13
-**Who is this for**: Developers, security engineers, open source maintainers.
14
-
-**What you'll learn**: We'll show you how to configure your workflow to use a language matrix. We will also cover the autobuild action for compiled langauges. This will allow you to have a single code scanning workflow that covers all the languages in your repository.
14
+
-**What you'll learn**: We'll show you how to configure your workflow to use a language matrix. We will also cover the autobuild action for compiled languages. This will allow you to have a single code scanning workflow that covers all the languages in your repository.
15
15
-**What you'll build**: A secure software development pipeline that has been tuned to your project's specific needs.
16
-
-**Prerequisites**: Knowledge of how the Context and expressions work in workflows. You can learn more about this in the [GitHub Actions documentation](https://docs.github.com/en/actions).
16
+
-**Prerequisites**: Knowledge of how the context and expressions work in workflows. You can learn more about this in the [GitHub Actions documentation](https://docs.github.com/en/actions).
17
17
-**How long**: This course is 2 steps long and takes less than 30 minutes to complete.
0 commit comments