Re: [QGIS-Developer] [security] Activate CodeQL Scanning in Github

2024-11-14 Thread Nick Bearman via QGIS-Developer
There was some discussion about Security within OSGeo a while back. Jody did some discussion on this, but I don't know where things are. This is a related post -https://lists.osgeo.org/pipermail/discuss/2023-November/039996.html - OSGeo Cyber Resilience Act statement - I know it's not the same

Re: [QGIS-Developer] [security] Activate CodeQL Scanning in Github

2024-11-14 Thread Nick Bearman via QGIS-Developer
There was some discussion about Security within OSGeo a while back. Jody did some discussion on this, but I don't know where things are. This is a related post -https://lists.osgeo.org/pipermail/discuss/2023-November/039996.html - OSGeo Cyber Resilience Act statement - I know it's not the same

Re: [QGIS-Developer] [security] Activate CodeQL Scanning in Github

2024-11-13 Thread Régis Haubourg via QGIS-Developer
Thanks a lot for you insights Even! Ok then, this is way beyond my skills and available time, let's forget this naive approach.  And let's plant a seed. Any Grant proposal toward enabling code scanning would be probably more than welcome. I know some of you are trying to gather funding to app

Re: [QGIS-Developer] [security] Activate CodeQL Scanning in Github

2024-11-13 Thread Even Rouault via QGIS-Developer
Régis, you will probably need a bit more work than just pushing the default button, as it will likely generate a default codeql.yml file that won't work out-of-the-box on QGIS without tuning it. You'll need first to install the list of QGIS dependencies to get a successful build.  Cf https://