GH-500 · Question #58
Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? Each answer presents part of the solution. (Choose three.)
The correct answer is A. install the CLI B. analyze code E. upload scan results. Integrating CodeQL into a third-party CI system involves three steps: (A) Install the CodeQL CLI on the CI runner, (B) Analyze the code by running CodeQL analysis to create a database and execute queries, and (E) Upload the scan results (SARIF file) to GitHub so alerts appear…
Question
Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? Each answer presents part of the solution. (Choose three.)
Options
- Ainstall the CLI
- Banalyze code
- Cwrite queries
- Dprocess alerts
- Eupload scan results
How the community answered
(28 responses)- A82% (23)
- C7% (2)
- D11% (3)
Explanation
Integrating CodeQL into a third-party CI system involves three steps: (A) Install the CodeQL CLI on the CI runner, (B) Analyze the code by running CodeQL analysis to create a database and execute queries, and (E) Upload the scan results (SARIF file) to GitHub so alerts appear in the Security tab. Writing queries (C) is not a required integration step - you use existing query suites. Processing alerts (D) is done by GitHub after results are uploaded, not a manual CI step.
Topics
Community Discussion
No community discussion yet for this question.