3 years ago

Category: github, shell

Finally, after few weeks of waiting, I got the beta access to GitHub code scanning! I forked WebGoat to give it a spin. Navigate to security tab, and look for ‘code scanning alert’ to set it up. this landed me to the CodeQL Analysis, okay, no surprise, this is implemented by GitHub action.

A few things that I have to change to make it suitable for WebGoat, — change the build to use ‘mvn clean install’ — add ‘-DskipTests’ to save some time — add step to setup JDK11