Skip to content

Evidence for github/codeql-action

GitHub Action for initializing, building, and analyzing projects with CodeQL.

Open repository

Run a reproducible Python quality gate

Problem: Run a reproducible quality gate for a typed Python CLI across environments, behavior, and hosted source analysis.

Covers

  • Supplies hosted repository-native source analysis and SARIF reporting in GitHub Actions.

Watch

  • It is GitHub-hosted and does not replace dependency, workflow, typing, or behavior checks.

Unknowns

  • No additional unknown recorded.

Assessment evidence

Assessed 2026-09-17 · Return to brief

Observed repository and provenance details - **License:** MIT - **Archived:** false - **Latest release:** v4 - **Latest commit:** `b96794f015dfd88f77b49b1c93e0fa7110f94c63` - **Last checked:** `2026-09-17T12:00:00+00:00` ### Screening evidence - docs/decisions/quality-security.json ### Source provenance - .github/workflows/security.yml — observed `2026-09-17T12:00:00+00:00`