GitHub code scanning

GitHub code scanning (Sep 2020 )

• https://docs.github.com/en/code-security/code-scanning/

Related

• GitHub Actions
• Code scanning
• GitHub Dependabot
• docker scan
• npm audit
• GitHub Advanced Security

See also

• Software Composition Analysis (SCA): Flexera, FOSSA, GitLab Ultimate, JFrog Xray, Snyk, Sonatype, Synopsys: Black Duck, Veracode, WhiteHat Security, WhiteSource, Bill of Materials (BOM), Semgrep, Clair
• GitHub, GitHub Actions, GitHub Actions Runner, Events, CodeQL, GitHub Desktop, GitHub organization, base permissions, GitHub Copilot, .gitignore, GitHub Codespaces, GitHub Marketplace, GitHub Apps, GitHub Enterprise Server, GitHub CLI (gh), Dependabot, GitHub security, .github/, GitHub code scanning, GitHub Pages, GitHub Packages, GitHub Advanced Security, GitHub Mobile, GitHub Importer, GitHub versions, SSH keys

https://github.blog/2020-09-30-code-scanning-is-now-available/