Add CodeQL Advanced workflow for security analysis #270
Conversation
|
cant merge #269 without the custom codeql |
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
| if: matrix.language == 'swift' | ||
| working-directory: ./example | ||
| run: | | ||
| flutter build ios --simulator --no-codesign --config-only |
There was a problem hiding this comment.
we need this to generate the xcode project
| - language: swift | ||
| build-mode: manual | ||
| runner: macos-latest |
There was a problem hiding this comment.
Use macos-14-xlarge if you want this to go way faster
Changes
#skip-changelog
Adds a CodeQL Advanced workflow for automated security and code quality analysis.
Languages analyzed:
/android/src//ios/and/macos/Notes:
dart analyzein the CI workflowmacos-latest(required by CodeQL)security-and-qualityqueries for comprehensive analysisSimilar to: https://github.com/PostHog/posthog-android/blob/main/.github/workflows/codeql.yml