Apache Allura™

Forge software for hosting software projects

Brought to you by: alexluberg, brondsem, deshani, dill0wn, and 10 others

#8534 set up github codeql

Milestone: unreleased

Status: closed

Owner: Dave Brondsema

Labels: security (34)

Component: General

Reviewer: nobody

Updated: 2024-01-11

Created: 2024-01-05

Creator: Dave Brondsema

Private: No

Our repo gets mirrored to https://github.com/apache/allura/ so we can set up CodeQL to run there and check for security issues in code

Discussion

Dave Brondsema - 2024-01-05

status: in-progress --> review
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2024-01-05

db/8534

I tested it on my fork, I think it should work fine. It has some fixes, and all the remaining alerts I reviewed and aren’t a concern and can be dismissed in the GitHub UI after this is merged

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2024-01-11

status: review --> closed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.