Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Private Registry Org-Level Configuration for Java & C# for CodeQL [GA] #1095

Open
glider-bot opened this issue Jan 23, 2025 · 0 comments
Open
Labels
ga Feature phase: Generally available GHES 3.18 GHES 3.18 GitHub Advanced Security (GHAS) Product SKU: GitHub Advanced Security

Comments

@glider-bot
Copy link
Collaborator

Value Prop

A new organization-level configuration option for adding secrets to access private registries will improve coverage for buildless CodeQL scans for Java and C#. Developers will have more confidence in the accuracy of the scans, and false negatives will be further reduced. Organization administrators will be able to easily add these credentials for use across all their repositories at once, reducing time spent on configuration and setup for CodeQL.

Expected Outcome

Coverage and confidence of CodeQL scans will increase with this feature, leading to even better security outcomes and increased peace-of-mind for security managers, with minimal overhead for configuration and management.

@glider-bot glider-bot added ga Feature phase: Generally available GHES 3.18 GHES 3.18 GitHub Advanced Security (GHAS) Product SKU: GitHub Advanced Security labels Jan 23, 2025
@glider-bot glider-bot moved this to Q1 2025 – Jan-Mar in GitHub Public Roadmap Jan 23, 2025
@github github locked and limited conversation to collaborators Jan 23, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
ga Feature phase: Generally available GHES 3.18 GHES 3.18 GitHub Advanced Security (GHAS) Product SKU: GitHub Advanced Security
Projects
Status: Q1 2025 – Jan-Mar
Development

No branches or pull requests

1 participant