You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+19-18
Original file line number
Diff line number
Diff line change
@@ -1,14 +1,14 @@
1
1
# Code Scanning C# Tutorial
2
2
3
-
Welcome to the Code Scanning C# Tutorial! This tutorial will take you through how to set up Github Advanced Security: Code Scanning as well as interpret results that it may find. The following repository contains cross-site scripting vulnerability for demonstration purpose.
3
+
Welcome to the Code Scanning C# Tutorial! This tutorial will take you through how to set up GitHub Advanced Security's Code Scanning, as well as interpret results that it may find. The following repository contains cross-site scripting vulnerabilities for demonstration purposes.
4
4
5
5
## Introduction
6
6
7
-
Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors. Any problems identified by the analysis are shown in GitHub.
7
+
Code Scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors. Any problems identified by the analysis are shown in GitHub.
8
8
9
-
You can use code scanning with CodeQL, a semantic code analysis engine. CodeQL treats code as data, allowing you to find potential vulnerabilities in your code with greater confidence than traditional static analyzers.
9
+
You can use Code Scanning with CodeQL, a semantic code analysis engine. CodeQL treats code as data, allowing you to find potential vulnerabilities in your code with greater confidence than traditional static analyzers.
10
10
11
-
This tutorial with use CodeQL Analysis with Code Scanning in order to search for vulnerabilities within your code.
11
+
This tutorial will use CodeQL analysis with Code Scanning in order to search for vulnerabilities within your code.
12
12
13
13
## Instructions
14
14
@@ -55,18 +55,19 @@ This will create a GitHub Actions Workflow file with CodeQL already set up. Sinc
55
55
#### Actions Workflow
56
56
57
57
The Actions Workflow file contains a number of different sections including:
58
+
58
59
1. Checking out the repository
59
60
2. Initializing the CodeQL Action
60
61
3. Running Autobuilder (or code your own build steps if autobuild doesn't work)
Click `Start Commit` -> `Commit this file` to commit the changes to _main_ branch.
70
+
Click `Start Commit` -> `Commit this file` to commit the changes to the _main_ branch.
70
71
</p>
71
72
</details>
72
73
@@ -77,15 +78,15 @@ Click `Start Commit` -> `Commit this file` to commit the changes to _main_ branc
77
78
78
79
#### Workflow triggers
79
80
80
-
There are a [number of events](https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows) that can trigger a GitHub Actions workflow. In this example, the workflow will be triggered on
81
+
There are a [number of events](https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows) that can trigger a GitHub Actions workflow. In this example, the workflow will be triggered on:
0 commit comments