[jira] [Commented] (NIFI-12278) Add GitHub CodeQL Scanning to Static Analysis Job

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-12278?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17780051#comment-17780051 ] 

ASF subversion and git services commented on NIFI-12278:
--------------------------------------------------------

Commit 39898d1ee28e7f0475560f2f4a052d904ef0104d in nifi's branch refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=39898d1ee2 ]

NIFI-12278 Added CodeQL to Static Analysis Job

This closes #7934

Signed-off-by: Chris Sampson <ch...@gmail.com>


> Add GitHub CodeQL Scanning to Static Analysis Job
> -------------------------------------------------
>
>                 Key: NIFI-12278
>                 URL: https://issues.apache.org/jira/browse/NIFI-12278
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Tools and Build
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Major
>             Fix For: 2.latest
>
>          Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> [GitHub CodeQL|https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql] scanning is available for public repositories and provides a default set of rules for common coding security vulnerabilities.
> The {{ci-workflow}} Static Analysis Job should be updated to include CodeQL scanning actions to detect potential concerns during the build process.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)