You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
### Work Item / Issue Reference
<!--
IMPORTANT: Please follow the PR template guidelines below.
For mssql-python maintainers: Insert your ADO Work Item ID below (e.g.
AB#37452)
For external contributors: Insert Github Issue number below (e.g. #149)
Only one reference is required - either GitHub issue OR ADO Work Item.
-->
<!-- mssql-python maintainers: ADO Work Item -->
>
[AB#38859](https://sqlclientdrivers.visualstudio.com/c6d89619-62de-46a0-8b46-70b92a84d85e/_workitems/edit/38859)
-------------------------------------------------------------------
### Summary
This pull request adds a new CodeQL security analysis job to the
`pr-validation-pipeline.yml` to improve automated security scanning of
the codebase. The changes introduce a dedicated container for the CodeQL
job, install necessary dependencies, and ensure the C++ extension is
built for analysis.
**Security and CI pipeline enhancements:**
* Added a new `CodeQLAnalysis` job to the pipeline to perform CodeQL
security analysis, including initialization and finalization steps.
* Introduced a `codeqlContainer` using the `ubuntu:20.04` image to
provide a consistent environment for CodeQL analysis.
* Added steps to install build dependencies and Python 3.13, and to
install Python requirements needed for CodeQL.
* Included a step to build the C++ extension
(`mssql_python/pybind/build.sh`) as part of the CodeQL analysis process.
<!--
### PR Title Guide
> For feature requests
FEAT: (short-description)
> For non-feature requests like test case updates, config updates ,
dependency updates etc
CHORE: (short-description)
> For Fix requests
FIX: (short-description)
> For doc update requests
DOC: (short-description)
> For Formatting, indentation, or styling update
STYLE: (short-description)
> For Refactor, without any feature changes
REFACTOR: (short-description)
> For release related changes, without any feature changes
RELEASE: #<RELEASE_VERSION> (short-description)
### Contribution Guidelines
External contributors:
- Create a GitHub issue first:
https://github.com/microsoft/mssql-python/issues/new
- Link the GitHub issue in the "GitHub Issue" section above
- Follow the PR title format and provide a meaningful summary
mssql-python maintainers:
- Create an ADO Work Item following internal processes
- Link the ADO Work Item in the "ADO Work Item" section above
- Follow the PR title format and provide a meaningful summary
-->
0 commit comments