README
¶
GitHub CodeQL
This component implements a scanner the GitHub CodeQL binary against a repository to produce SAST findings and parses them to ocsf format.
Environment variables
The component uses environment variables for configuration.
It requires the component environment variables defined here as well as the following:
| Environment Variable | Type | Required | Default | Description |
|---|---|---|---|---|
| CODEQL_RAW_OUT_FILE_GLOB | string | yes | - | The path where to output findings to |
Directories
Click to show internal directories.
Click to hide internal directories.