Description:
I propose adding a CodeQL analysis workflow to the repository to automate security and code quality checks for Go code. This workflow will run on both pushes and pull requests to the main branch, as well as on a weekly schedule.
Why CodeQL?
Security Scanning: Automatically identifies vulnerabilities, insecure patterns, and outdated dependencies.
Code Quality: Detects issues related to code health and maintainability.
Prevent Regressions: Ensures that new code contributions don’t introduce security flaws or regressions.
Description:
I propose adding a CodeQL analysis workflow to the repository to automate security and code quality checks for Go code. This workflow will run on both pushes and pull requests to the main branch, as well as on a weekly schedule.
Why CodeQL?
Security Scanning: Automatically identifies vulnerabilities, insecure patterns, and outdated dependencies.
Code Quality: Detects issues related to code health and maintainability.
Prevent Regressions: Ensures that new code contributions don’t introduce security flaws or regressions.