Try out the CodeQL community queries for Go

As announced in: <https://github.blog/security/vulnerability-research/announcing-codeql-community-packs/> Signed-off-by: Eric Cornelissen <[email protected]>
ericcornelissen · Dec 26, 2024 · 9aa766c · 9aa766c
1 parent 7be5d5e
commit 9aa766c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -26,5 +26,7 @@ jobs:
       uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
       with:
         languages: go
+        queries: security-extended
+        packs: githubsecuritylab/[email protected],githubsecuritylab/[email protected]
     - name: Perform CodeQL analysis
       uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0