1
0
mirror of synced 2025-12-21 10:57:10 -05:00
Files
docs/content/code-security/code-scanning/integrating-with-code-scanning/about-integration-with-code-scanning.md
2023-04-24 17:32:37 +00:00

3.4 KiB

title, shortTitle, intro, product, redirect_from, versions, type, topics
title shortTitle intro product redirect_from versions type topics
About integration with code scanning About integration You can perform {% data variables.product.prodname_code_scanning %} externally and then display the results in {% data variables.product.prodname_dotcom %}, or configure webhooks that listen to {% data variables.product.prodname_code_scanning %} activity in your repository. {% data reusables.gated-features.code-scanning %}
/github/finding-security-vulnerabilities-and-errors-in-your-code/about-integration-with-code-scanning
/code-security/secure-coding/about-integration-with-code-scanning
/code-security/secure-coding/integrating-with-code-scanning/about-integration-with-code-scanning
/github/finding-security-vulnerabilities-and-errors-in-your-code/integrating-with-code-scanning/about-integration-with-code-scanning
fpt ghes ghae ghec
* * * *
overview
Advanced Security
Code scanning
Webhooks
Integration

{% data reusables.code-scanning.beta %} {% data reusables.code-scanning.enterprise-enable-code-scanning %}

As an alternative to running {% data variables.product.prodname_code_scanning %} within {% data variables.product.prodname_dotcom %}, you can perform analysis elsewhere and then upload the results. Alerts for {% data variables.product.prodname_code_scanning %} that you run externally are displayed in the same way as those for {% data variables.product.prodname_code_scanning %} that you run within {% data variables.product.prodname_dotcom %}. For more information, see "AUTOTITLE."

If you use a third-party static analysis tool that can produce results as Static Analysis Results Interchange Format (SARIF) 2.1.0 data, you can upload this to {% data variables.product.prodname_dotcom %}. For more information, see "AUTOTITLE."

{% ifversion fpt or ghes > 3.4 or ghae > 3.4 or ghec %} {% data reusables.code-scanning.about-multiple-configurations-link %} {% endif %}

Integrations with webhooks

You can use {% data variables.product.prodname_code_scanning %} webhooks to build or configure integrations, such as {% data variables.product.prodname_github_apps %} or {% data variables.product.prodname_oauth_apps %}, that subscribe to {% data variables.product.prodname_code_scanning %} events in your repository. For example, you could build an integration that creates an issue on {% data variables.product.product_name %} or sends you a Slack notification when a new {% data variables.product.prodname_code_scanning %} alert is added in your repository. For more information, see "AUTOTITLE" and "AUTOTITLE."

Further reading