Code Scanning in GitHub

GitHub Code Scanning is a feature that helps identify vulnerabilities in code.

To set it up, go to the repository settings and click on "Code security and analysis" and then "Code scanning".

After the analysis is complete, any findings will be displayed next to the security link at the top of the repository. In addition to GitHub's built-in scanning, other tools such as DevSkim can be integrated. It's important to note that GitHub Code Scanning uses GitHub actions, which may have a cost for scanning multiple repositories.