@@ -229,31 +229,29 @@ Make sure that the base branch is set to your own repositories `main` branch ver
229
229
230
230
Once the Pull Request has been created, you will notice that the CodeQL Analysis has started as a status check. Wait until it completes.
231
231
232
- <img src =" images/18-pr-in-progress.png " width =" 80% " />
233
-
234
232
After the Workflow has completed, the ` Code Scanning Results / CodeQL ` status check will have failed.
235
233
Notice that Code Scanning has detected that this Pull Request introduces a new security alert.
236
234
237
- <img src =" images/19 -pr-check-failed.png " width =" 80% " />
235
+ <img src =" images/18 -pr-check-failed.png " width =" 80% " />
238
236
239
237
240
238
#### Alert Centric Notifications
241
239
242
240
Directly in the Pull Request, you will notice that GitHub Code Scanning bot has left a review of the Pull Request with the security alert details.
243
241
This will help developers to quickly identify security issues introduced in their Pull Requests.
244
242
245
- <img src =" images/20 -pr-review.png " width =" 80% " />
243
+ <img src =" images/19 -pr-review.png " width =" 80% " />
246
244
247
245
248
246
This also allows for collaboration between developers and security teams to discuss the security alert and how to remediate it.
249
247
250
- <img src =" images/21 -pr-review-collaboration.png " width =" 80% " />
248
+ <img src =" images/20 -pr-review-collaboration.png " width =" 80% " />
251
249
252
250
#### Security Alert Details
253
251
254
252
Click on ` Show more details ` by the new ` Code Scanning Alert ` to jump to the ` Security ` tab and view the security alert details.
255
253
256
- <img src =" images/22 -pr-show-more-details.png " width =" 80% " />
254
+ <img src =" images/21 -pr-show-more-details.png " width =" 80% " />
257
255
258
256
Notice that the security alert was found ` In pull request ` and not in the ` main ` branch (production).
259
257
0 commit comments