Skip to content

Conversation

@andoriyaprashant
Copy link

Description

This PR adds a GitHub Actions workflow to enable Codeql static analysis for Go code in the worker-operator repository.
The workflow will help identify potential vulnerabilities, maintain code quality, and run automatically:

  • On push and pull requests to master
  • On a weekly scheduled run (Sunday 00:00 UTC)
  • Using GitHub’s official codeql-action with minimal required permissions

Fixes kubeslice/kubeslice#64

How Has This Been Tested?

  • Verified workflow syntax with act and GitHub Actions syntax check.
  • Confirmed that CodeQL initializes and analyzes Go projects in a test fork.

Checklist:

  • The title of the PR states what changed and the related issues number (used for the release note).
  • Does this PR requires documentation updates?
  • I've updated documentation as required by this PR.
  • I have ran go fmt
  • I have updated the helm chart as required by this PR.
  • I have performed a self-review of my own code.
  • I have commented my code, particularly in hard-to-understand areas.
  • I have tested it for all user roles.
  • I have added all the required unit test cases.
  • I have verified the E2E test cases with new code changes.
  • I have added all the required E2E test cases.

Signed-off-by: andoriyaprashant <prashantandoriya@gmail.com>
@gourishkb
Copy link
Contributor

Hey @richiesebastian can you please take a look at this PR #443

@gourishkb gourishkb added the github_actions Pull requests that update GitHub Actions code label Aug 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature: Add CodeQL Workflow for Static Code Analysis in KubeSlice Repositories

2 participants