Skip to content

chore(): Added CodeQL Analysis Workflow#256

Open
andoriyaprashant wants to merge 1 commit intokubeslice:masterfrom
andoriyaprashant:codeql
Open

chore(): Added CodeQL Analysis Workflow#256
andoriyaprashant wants to merge 1 commit intokubeslice:masterfrom
andoriyaprashant:codeql

Conversation

@andoriyaprashant
Copy link

@andoriyaprashant andoriyaprashant commented Aug 9, 2025

Description

This PR adds a GitHub Actions workflow to enable Codeql static code analysis for Go code in the kubeslice-controller repository.
The workflow will help proactively identify potential vulnerabilities, improve code quality, and maintain long-term security compliance.

Key details:

  • Runs on pushes and pull requests to the master branch
  • Scheduled weekly scans every Sunday at 00:00 UTC
  • Uses GitHub’s official codeql-action for Go
  • Requires minimal permissions to write security events

Fixes kubeslice/kubeslice#64

How Has This Been Tested?

The workflow has been validated by:

  • Running a syntax check to ensure GitHub Actions compatibility
  • Confirming CodeQL initialization and analysis on Go repositories in a test fork

Checklist:

  • The title of the PR states what changed and the related issues number (used for the release note).
  • Does this PR requires documentation updates?
  • I've updated documentation as required by this PR.
  • I have performed a self-review of my own code.
  • I have commented my code, particularly in hard-to-understand areas.
  • I have tested it for all user roles.
  • I have added all the required unit test cases.

Signed-off-by: andoriyaprashant <prashantandoriya@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature: Add CodeQL Workflow for Static Code Analysis in KubeSlice Repositories

1 participant