From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Optimize CodeQL analysis runtimes - GitHub Tutorial
From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Optimize CodeQL analysis runtimes
- [Instructor] Here, this is a reminder that time is money. Well, ain't that the truth? I guess less than over. Let's call this video training course finished. Now it's about, again, balance. It's about make sure that you're configuring CodeQL in however you choose to do that, and we've talked about shareable config files and so on. Focus on specific areas, not the whole code base. It's again, what I said a few lessons ago. Just because you can do a thing doesn't mean you should. You're paying for the underlying run minutes because CodeQL is on top of GitHub actions. And GitHub actions is on top of virtual machines in the cloud that you're paying for. Caching is an important concept in terms of cost saving and performance tuning for your workflows. In fact, I'll include a little on the demo on the subject. Caching your queries to GitHub's content delivery network means that frequently used artifacts and dependencies can be made available to the GitHub-hosted cloud runners much faster…
Contents
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
(Locked)
Learning objectives33s
-
(Locked)
Describe how to view code scanning results from CodeQL analysis1m 49s
-
(Locked)
Troubleshoot a failing code scanning workflow using CodeQL2m 36s
-
(Locked)
Follow the data flow through code using the show paths experience1m 38s
-
(Locked)
Explain the reason for a code scanning alert given documentation linked from the alert1m 4s
-
(Locked)
Determine if and why a code scanning alert needs to be dismissed1m 22s
-
(Locked)
Describe potential shortfalls in CodeQL via a model of compilation and language support1m 47s
-
(Locked)
Optimize CodeQL analysis runtimes17m 9s
-
(Locked)
-
-
-
-