Skip to content

Conversation

Copy link

Copilot AI commented Jan 14, 2026

Adds automated security scanning via CodeQL for the Go codebase.

Changes

  • Created .github/workflows/codeql.yml with:
    • Go language analysis using CodeQL autobuild
    • Triggers: push/PR to master, weekly scheduled scan (Sundays 1:30 UTC)
    • Required permissions for security-events write access

The workflow enables GitHub Advanced Security code scanning alerts for vulnerability detection.

Original prompt

add a new github workflow, that introduces a codeql analysis


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: mrwiora <2744285+mrwiora@users.noreply.github.com>
Copilot AI changed the title [WIP] Add new GitHub workflow for CodeQL analysis Add CodeQL security analysis workflow Jan 14, 2026
Copilot AI requested a review from mrwiora January 14, 2026 11:56
@mrwiora mrwiora marked this pull request as ready for review January 14, 2026 11:58
@mrwiora mrwiora merged commit d0ff931 into master Jan 14, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants