Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement DevSecOps through GitHub's Dependabot and CodeQL #305

Open
wants to merge 84 commits into
base: master
Choose a base branch
from

Conversation

aleks-ivanov
Copy link

  • add security and versioning dependency alerts through GitHub Dependabot (dependabot.yml)
  • add continuous security analysis using GitHub CodeQL (codeql-analysis.yml)
  • add documentation about functionality and setup for both features (CI-CD_DOCUMENTATION.md and CI-CD_DOCUMENTATION folder with images)

Resolves #289
Resolves #290

aleks-ivanov and others added 30 commits February 24, 2021 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add continuous security analysis using GitHub CodeQL Add security and versioning dependency alerts
2 participants