What does code scanning do?

The correct answer is C. It analyzes a GitHub repository to find security vulnerabilities. Code scanning performs static analysis on the code in a GitHub repository to detect security vulnerabilities and coding errors. It uses tools like CodeQL (GitHub's own engine) or any SARIF-compatible third-party tool. Results appear as alerts in the Security tab. It does not…

Code Scanning

Question

Options

AIt scans your entire Git history on branches present in your GitHub repository for any secrets.
BIt prevents code pushes with vulnerabilities as a pre-receive hook.
CIt analyzes a GitHub repository to find security vulnerabilities.
DIt contacts maintainers to ask them to create security advisories if a vulnerability is found.

How the community answered

(51 responses)

A
2% (1)
B
2% (1)
C
92% (47)
D
4% (2)

Explanation

Code scanning performs static analysis on the code in a GitHub repository to detect security vulnerabilities and coding errors. It uses tools like CodeQL (GitHub's own engine) or any SARIF-compatible third-party tool. Results appear as alerts in the Security tab. It does not scan Git history for secrets (that is secret scanning), does not act as a pre-receive hook, and does not contact maintainers about advisories (that is Dependabot/security advisories).

Topics

#Code scanning#Security vulnerabilities#Repository analysis#GitHub Advanced Security

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice