Scanning GitHub code has never been simpler

computing

(Image credit: Shutterstock/BEST-BACKGROUNDS)

GitHub now allows developers to scan their code for the “default setup” repository, hopefully helping them to spot any security issues before they escalate.

With this new feature, Github says developers (opens in new tab) will be able to configure the repository automatically, and with as little effort as possible. 

GitHub’s code scanning is powered by its CodeQL engine, and while it supports a wide variety of compilers, so far the feature is only available for Python, JavaScript, and Ruby. That should change soon, said GitHub’s Walker Chabbott, as the company now seeks to expand the support to additional languages by summer.

Simplifying bug hunting

Those looking to test out the new feature should open up their repository’s settings, navigate to “Code security and analysis”, and click the “Set up” drop-down menu. There, they’ll find the “Default” option.

“When you click on ‘Default,’ you’ll automatically see a tailored configuration summary based on the contents of the repository,” Chabbott said in the blog post. “This includes the languages detected in the repository, the query packs that will be used, and the events that will trigger scans. In the future, these options will be customizable.”

Read more

> GitHub launches Copilot for businesses
> GitHub brings free secret scanning to all public repositories
> Here’s our rundown of the best endpoint protection tools around (opens in new tab)

Once “Enable CodeQL” is turned on, the feature will automatically start looking for flaws in the repository.

The CodeQL code analysis engine, BleepingComputer reminds, was added to the GitHub platform in September 2019, following the latter’s acquisition. 

After a year in beta testing, general availability was announced in September 2020. During the beta stage, the tool scanned more than 12,000 repositories, 1.4 million times, and found more than 20,000 security vulnerabilities. Some of these were of high severity, including remote code execution (RCE), SQL injection, and cross-site scripting (XSS).

Scanning the code is free of charge for all, the publication added, stressing that Enterprise users can also benefit from it, via the GitHub Advanced Security for GitHub Enterprise.

    Via: BleepingComputer (opens in new tab)

    Are you a pro? Subscribe to our newsletter

    Sign up to theTechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

    By submitting your information you agree to the Terms & Conditions (opens in new tab) and Privacy Policy (opens in new tab) and are aged 16 or over.

    Sead Fadilpašić

    Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

    TECH NEWS RELATED

    This Tiny MSI PC is Packed With Power

    MSI Following the example set by the Mac Mini, many Windows-powered compact PCs have popped up recently with solid hardware. If none have quite caught your eye, though, maybe this PC by MSI will. MSI has just released a new tiny PC called the Cubi 5 12M, and it’s ...

    View more: This Tiny MSI PC is Packed With Power

    Logitech’s New Colorful Keyboards and Mice Look Great

    Logitech Logitech makes some of the best keyboards and best mice around, and you might be familiar with the company’s RGB-packed gaming products. These new peripherals are really packed with color, but we’re not really talking about lights. Logitech has announced a range of new colors for a bunch ...

    View more: Logitech’s New Colorful Keyboards and Mice Look Great

    “Part of the Journey Is the End;” Marvel’s Avengers Seems to be Shutting Down

    Whether it be purely the lackluster quality of the game or the general distaste for live service games, Marvel’s Avengers never truly found its footing in the two years since it was released. Despite the fact that both the Marvel and Avengers labels should guarantee a happy, comic-lover audience, ...

    View more: “Part of the Journey Is the End;” Marvel’s Avengers Seems to be Shutting Down

    Satechi Thunderbolt 4 Slim Hub review: A sleek and portable laptop hub

    Thunderbolt 4 docks are now much more widely available, meaning that it’s much easier to get a high speed dock that works with your laptop. But unfortunately, while they’re relatively widely available now, they’re still quite expensive. Thankfully, however, that price seems to now be coming down a little through ...

    View more: Satechi Thunderbolt 4 Slim Hub review: A sleek and portable laptop hub

    Wi-Fi routers are being hit by a dangerous new Android malware with extra DNS hacks

    With the DNS changed, users are redirected to malicious pages

    View more: Wi-Fi routers are being hit by a dangerous new Android malware with extra DNS hacks

    Servant unleashes a bed bug blitz [Apple TV+ recap]

    Just when you thought things couldn't get any worse … bed bugs! Photo: Apple TV+ Dorothy is back in the bizarre Turner household this week on Apple TV+ thriller Servant — and she’s not happy to be home. Leanne insists on normalcy, but considering the things that have happened, ...

    View more: Servant unleashes a bed bug blitz [Apple TV+ recap]

    Hostinger quietly shutters Zyro to focus on Hostinger Website Builder service

    Will Zyro website builder still exist soon?

    View more: Hostinger quietly shutters Zyro to focus on Hostinger Website Builder service

    Redmi Note 12 Turbo Tipped to get Snapdragon 7-series SoC

    The Xiaomi Redmi Note 12 Series arrived in China and India last year. With that being said, we might see another offering in the Redmi Note series phone in the coming months where it will be powered by the Snapdragon 7-series chipset onboard. The information comes from a notable ...

    View more: Redmi Note 12 Turbo Tipped to get Snapdragon 7-series SoC

    Avatar 2 animators tricked James Cameron into believing some shots were practical

    Super Bowl 2023 live stream: how to watch the game, commercials and halftime show from anywhere

    The Minecraft Community Answers the Age-old Question: “Can it Run Doom?”

    Mark Hamill Hints That His Time as the Joker Is Over

    Deadpool joins Marvel's Midnight Suns next week, adding new story missions

    Chic-Fil-A’s Training Program Apparently Features a Familiar Fallout Face

    Nintendo is reportedly increasing Switch production ahead of Breath of the Wild 2

    Ex-Halo dev believes those who pushed for a better game ‘got laid off for it’

    There are two clear winners in the PSVR 2 launch lineup

    A nuclear-powered data center is opening this year

    Anker’s New Monitor Stand Doubles as an All-In-One Docking Station

    Naked Elden Ring Player Counter’s Placidusax’ Attack With Chaotic Results

    OTHER TECH NEWS

    Top Car News Car News