GitHub code scanning
Named by 5 kept items in this workspace.
Search every workspace for GitHub code scanning. It matches the name as written, so it can find other things that share it.
The items that name it 5
code scanning tool that the post says could detect the .vscode/tasks.json indicator but doesn't correlate with advisories
consumes SARIF output from Talaria
Consumes SARIF output produced by CVE Lite CLI's --sarif flag.
Automated security testing to identify vulnerabilities and errors in source code without compiling/executing it
Free for open source static analysis service using GitHub Actions and CodeQL to scan public repositories; supports C/C++, C#, Ruby (beta), Java, JavaScript/TypeScript, Python, and Go
All technologies in this workspace.