GH-500 · Question #67
Where can you view code scanning results from CodeQL analysis?
The correct answer is D. the repository's code scanning alerts. Results from CodeQL analysis are surfaced in the repository's code scanning alerts section, found under the Security tab. From there, developers can view, filter by severity or rule, investigate the code path, and dismiss or track alerts. A CodeQL database is an intermediate…
Question
Where can you view code scanning results from CodeQL analysis?
Exhibit
Options
- Aa CodeQL database
- Bat Security advisories
- Ca CodeQL query pack
- Dthe repository's code scanning alerts
How the community answered
(34 responses)- B3% (1)
- C6% (2)
- D91% (31)
Explanation
Results from CodeQL analysis are surfaced in the repository's code scanning alerts section, found under the Security tab. From there, developers can view, filter by severity or rule, investigate the code path, and dismiss or track alerts. A CodeQL database is an intermediate artifact used during analysis, not a place to view results. Query packs are collections of queries used to run analysis. Security advisories are a separate feature for publicly disclosing vulnerabilities.
Topics
Community Discussion
No community discussion yet for this question.