GITHUB ENTERPRISE CLOUD: CODEQL-DRIVEN CODE QUALITY IN PRS AND REPOS
GitHub Enterprise Cloud documents "Code Quality" that uses CodeQL to surface non‑security maintainability/reliability issues alongside code scanning. Alerts sho...
GitHub Enterprise Cloud documents "Code Quality" that uses CodeQL to surface non‑security maintainability/reliability issues alongside code scanning. Alerts show on PRs and in the repository, and teams can configure languages, query suites, severities, and baselines to manage noise.
Catches non‑security issues early without adding another tool outside GitHub.
Consolidates quality and security scanning in one workflow to simplify CI.
-
terminal
Enable CodeQL with quality queries on one service repo and measure alert volume, false positives, and PR latency impact for two sprints.
-
terminal
Prototype LLM-assisted fixes for recurrent quality alerts and track acceptance rate and time-to-merge.
Legacy codebase integration strategies...
- 01.
Start with a baseline so existing issues don’t fail builds, and gate only new alerts on PRs.
- 02.
Map existing linters/Sonar rules to CodeQL query packs and disable duplicates to reduce noise.
Fresh architecture paradigms...
- 01.
Enable code scanning with quality query suites from day one and make the check required on main.
- 02.
Version control CodeQL configuration and suppressions to keep pipelines deterministic and fast.