5. Turn on code scanning
Code scanning uses CodeQL to identify patterns that lead to vulnerabilities, including injection flaws, unsafe deserialization, and insecure GitHub Actions workflows.
Default setup chooses the appropriate queries and runs them on pull requests.
- 5. Turn on code scanning Code scanning uses CodeQL to identify patterns that lead to vulnerabilities, including injection flaws, unsafe deserialization, and insecure GitHub Actions workflows. Default setup chooses the appropriate queries and runs them on pull requests.
These settings won’t make your project unhackable. Nothing will. But they make your project significantly harder to attack, protecting its users and everything that depends on it.
