How would you build your code within the CodeQL analysis workflow? Each answer presents a complete solution. (Choose two.)

Question

Options

• AUpload compiled binaries.
• BUse CodeQL's autobuild action.
• CUse jobs.analyze.runs-on.
• DUse CodeQL's init action.
• EIgnore paths.
• FImplement custom build steps.

• A
  9% (3)
• B
  79% (27)
• C
  3% (1)
• E
  3% (1)
• F
  6% (2)

Explanation

The CodeQL Action supports different build modes for analyzing the source code. The available build modes are: none: The database will be created without building the source code. Available for all interpreted languages and some compiled languages. *-> autobuild: The database will be created by attempting to automatically build the source code. Available for all compiled languages. manual: The database will be created by building the source code using a manually specified build command. To use this build mode, specify manual build steps in your workflow between the init and analyze steps. Available for all compiled languages. This repository contains several actions that enable you to analyze code in your repository using CodeQL and upload the analysis to GitHub Code Scanning. Actions in this repository also allow you to upload to GitHub analyses generated by any SARIF-producing SAST tool. Actions for CodeQL analyses: *-> init: Sets up CodeQL for analysis. analyze: Finalizes the CodeQL database, runs the analysis, and uploads the results to Code

No community discussion yet for this question.