From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Reference a configuration file within the same repository

Reference a configuration file within the same repository - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Reference a configuration file within the same repository

“

- [Instructor] And what we're talking about here is actually CodeQL configuration. We've seen that we use YAML to configure the various bots, agents, and capabilities that GitHub Advanced Security gives us. So it should come as no surprise that we can have and then reference a separate config file for CodeQL. This is going to give us reuse, isn't it? Centralized configuration and reusable settings because you can have primary or point of contact config file, your golden config file, let's say, on how you want CodeQL to work. Or you may have multiple variant golden config files. You can store them centrally and use them as just centralized, reusable resources. Best practices with sharing is that we're consistently applying preferred analysis settings across different workflows. Very useful, good governance here. Good guidance from GitHub.

Contents