Feasibility and DR: use of CodeQL for VS Code

[roslynwythe]

Overview

We should consider whether to adopt the policy that developers should install the "CodeQL for VS Code" extension. Currently the default branch of the repository is scanned weekly and the changed files in each Pull Request are scanned, however there are advantages to recieving alerts prior to initiating the Pull Request process.

Action Items

• Become familiar with the repository level CodeQL scanning implemented in codeql-implementation #4886
• Consider whether HfLA developers should install the CodeQL for VS Code extension.
• We are currently in the process of moving the old wiki to the new website-wiki repo, so we will not be making any changes or additions to the old wiki at this time. Thus, we will be adding wiki content through a different process now. Read How to Contribute to the Wiki
• Following the instruction in How to Contribute to the Wiki, write a draft DR with your recommendation in a comment in this issue.
• Move this issue to Questions/In Review and add the ready for dev lead label.

Resources/Instructions

• codeql-implementation #4886
• CodeQL for Visual Studio Code](https://codeql.github.com/docs/codeql-for-visual-studio-code/)

[github-actions]

Hi @kiran98118, thank you for taking up this issue! Hfla appreciates you :)

Do let fellow developers know about your:-
i. Availability: (When are you available to work on the issue/answer questions other programmers might have about your issue?)
ii. ETA: (When do you expect this issue to be completed?)

You're awesome!

P.S. - You may not take up another issue until this issue gets merged (or closed). Thanks again :)

[kiran98118]

i. Availability: I am available on Sunday, Tuesday, Wednesday, Friday and Saturday (10 am to 5pm)
ii. ETA: 11-02-2024

[ExperimentsInHonesty]

@kiran98118 It looks like you forgot to move this to the in progress column on the board. I will move it for you.

[kiran98118]

Thank you Bonnie.

…

On Tue, Feb 13, 2024 at 4:07 PM Bonnie Wolfe ***@***.***> wrote: @kiran98118 <https://github.com/kiran98118> It looks like you forgot to move this to the in progress column on the board. I will move it for you. — Reply to this email directly, view it on GitHub <#5180 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKIK4WG3SVHWQHU6QHTNHOLYTPIZLAVCNFSM6AAAAAA3LEZZ52VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNBSGUZTMNJWGQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>