Skip to content

Implement DevSecOps through GitHub's Dependabot and CodeQL#305

Open
aleks-ivanov wants to merge 84 commits intoKinnara:masterfrom
pipeline-foundation:devsecops
Open

Implement DevSecOps through GitHub's Dependabot and CodeQL#305
aleks-ivanov wants to merge 84 commits intoKinnara:masterfrom
pipeline-foundation:devsecops

Conversation

@aleks-ivanov
Copy link
Copy Markdown

  • add security and versioning dependency alerts through GitHub Dependabot (dependabot.yml)
  • add continuous security analysis using GitHub CodeQL (codeql-analysis.yml)
  • add documentation about functionality and setup for both features (CI-CD_DOCUMENTATION.md and CI-CD_DOCUMENTATION folder with images)

Resolves #289
Resolves #290

aleks-ivanov and others added 30 commits February 24, 2021 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add continuous security analysis using GitHub CodeQL Add security and versioning dependency alerts

2 participants