Degital PR Platform

GitHub CodeQLに標準CERT C++とAUTOSAR C++を実装

ISO 26262 Part 6プロセス準拠の実証を必要とする開発者を支援し、より安全なソフトウェア開発を実現 オープンソースプロジェクトおよびビジネスユースを含む、ソフトウェアの開発プラットフォームを提供するGitHub, Inc.（本社：米国サンフランシスコ）は、6 ...

GitHub、CodeQL 2.23.7および2.23.8でGoとRust向け新セキュリティクエリを追加

Rust用には、クロスサイトスクリプティング検出やTLS証明書検証無効化検出などが追加された。加えて、各言語やフレームワークのサポート強化や、Mavenビルドとの互換性向上、C#やPythonなど他言語のバグ修正も行われた。
InfoQ

GitHub CodeQL Code Scanning Now Supports Setting Threat Model GitHub CodeQL Code Scanning ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
InfoQ

GitHub Enhances CodeQL, Extends Language Support, Available Queries, and More

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
blockchain

GitHub Enhances CodeQL with Rust Security and Multi-Language Improvements

GitHub's CodeQL 2.23.2 update introduces enhanced Rust security detections and accuracy improvements across various programming languages, including JavaScript, Python, Ruby, and Go. GitHub has ...
blockchain

GitHub Enhances CodeQL Flexibility with New Security Configuration Options

GitHub introduces a new feature allowing organizations to run CodeQL with either default or advanced setups, enhancing security configuration flexibility. GitHub has announced a significant update to ...
GitHub

hiryamada/skills-introduction-to-codeql2

In this exercise, we'll review the CodeQL scan results, triage an alert, and create a GitHub issue to track an alert. What is GitHub Actions: GitHub Actions is the automation and CI/CD platform within ...