When using the advanced CodeQL code scanning setup, what is the name of the workflow file?

The correct answer is B. codeql.yml. When you enable the advanced CodeQL code scanning setup on GitHub (as opposed to the default/automatic setup), GitHub generates a workflow file named codeql.yml stored in .github/workflows/. This file defines the CodeQL analysis configuration, including languages, build steps…

Configure and use Code Scanning with CodeQL

Question

Options

Acodeql-scan.yml
Bcodeql.yml
Ccodeql-workflow.yml
Dcodeql-config.yml

How the community answered

(32 responses)

A
3% (1)
B
94% (30)
D
3% (1)

Explanation

When you enable the advanced CodeQL code scanning setup on GitHub (as opposed to the default/automatic setup), GitHub generates a workflow file named codeql.yml stored in .github/workflows/. This file defines the CodeQL analysis configuration, including languages, build steps, and trigger events. The other filenames listed (codeql-scan.yml, codeql-workflow.yml, codeql-config.yml) are not the standard names GitHub uses for this generated workflow.

Topics

#CodeQL#Code Scanning#GitHub Actions workflows#Default filenames

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice