Centralized security workflows: CodeQL analysis, Octoscan, and permissions auditing for all repositories
- CodeQL Analysis - Automated code security scanning for github actions
- Zizmor - GitHub Actions workflow vulnerability detection
- Octoscan - GitHub Actions workflow vulnerability detection
- Permissions Advisor - Workflow permissions optimization and least-privilege enforcement
- How to use it
- Summary of Github best practises
- How to resolve issues
- How to configure CodeQL to scanning repo's code