From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Describe how to view code scanning results from CodeQL analysis

Describe how to view code scanning results from CodeQL analysis - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Describe how to view code scanning results from CodeQL analysis

“

- [Instructor] Well, by now, we're well aware of the Security tab in any repository. There's plenty of GitHub UI navigation to be had on that Security tab. We will come down to code scanning, and we'll see the active alerts that will resolve themselves automatically once you've resolved the code problem. Otherwise, you can manually dismiss the alert, but you'll have to provide justification. SARIF, we recall is that vendor neutral JSON format that represents a standard or an attempt at standardization for these static code analysis logs. Now, GitHub certainly allows you to upload SARIF and then view that data within GitHub. Likewise, we can do a little bit of programming. Basically, it comes down to JSON parsing to take alerts from GitHub and convert them into SARIF format. It's not an enormous deal for the certification exam, but I'm going to include a little bit on this subject in our upcoming demo today. And, lastly, GitHub Command Line Interface or CLI. It's important for your…

Contents