Files
probo/controls/core/src/COR.SRC.002.enable_code_scanning.md
gearnode 3f3bcc48b5 Add COR.INF controls
Signed-off-by: gearnode <bryan@frimin.fr>
2025-01-14 16:43:15 +01:00

854 B

id, category, revision-version, revision-date, estimate-time, necessity, frameworks
id category revision-version revision-date estimate-time necessity frameworks
COR.SRC.002 core/src 1 2024-01-07 15m optional
name sections
soc2
CC4.1
CC8.1

Configure Code Scanning

Purpose

It ensures that potential security flaws are detected early. This proactive approach strengthens your security posture and helps maintain high code quality.

Implementation

Github

  1. Go to the "Security" tab of your repository.
  2. Click on "Set up code scanning".
  3. Select "Set up this workflow" under "CodeQL Analysis".
  4. Review the YAML file and commit it to your repository.

Code scanning will now run every time code is pushed to the repository, and results will appear in the Security tab.

Evidence

  • Screenshot of code scanning results from Security tab
  • Sample of resolved security alerts