Skip to content

Implement DevSecOps through GitHub's Dependabot and CodeQL#1563

Merged
alexeyzimarev merged 6 commits intorestsharp:devfrom
pipeline-foundation:devsecops
May 5, 2021
Merged

Implement DevSecOps through GitHub's Dependabot and CodeQL#1563
alexeyzimarev merged 6 commits intorestsharp:devfrom
pipeline-foundation:devsecops

Conversation

@aleks-ivanov
Copy link
Copy Markdown
Contributor

@aleks-ivanov aleks-ivanov commented Feb 25, 2021

Description

  • add security and versioning dependency alerts through GitHub Dependabot (dependabot.yml)
  • add continuous security and quality analysis using GitHub CodeQL (codeql-analysis.yml)
  • add documentation about functionality and setup for both features (docs/CI-CD_DOCUMENTATION folder contains CI-CD_DOCUMENTATION.md and images)

Purpose

This pull request is a:

  • New feature (non-breaking change which adds functionality)

Checklist

  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

Resolves #1560
Resolves #1561

@alexeyzimarev alexeyzimarev merged commit 2b697c4 into restsharp:dev May 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add continuous security analysis using GitHub CodeQL Add security and versioning dependency alerts

3 participants