Files
blackroad-os-web/.github/workflows/blackroad-codeql-analysis.yml
Alexa Amundson 8665c910b2 🔍 Enable CodeQL security scanning
Automated static application security testing (SAST) for vulnerability detection.

Features:
- Multi-language support (JavaScript, Python, Go, Java, etc.)
- Weekly automated scans (Mondays 4 AM UTC)
- Security + quality queries
- Automatic issue creation for failures
- SARIF result uploads for GitHub Security tab
- Compliance-ready (SOC 2, ISO 27001)

Expected Impact:
- Continuous vulnerability detection
- Early warning for security issues
- Compliance requirements met
- Proactive security posture

© 2025-2026 BlackRoad OS, Inc.
2026-01-04 17:04:22 -06:00

2.6 KiB