romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-05-30 12:37:28 +03:00
Code Issues Projects Releases Packages Wiki Activity

GHA: drop codeql

Browse source 
We started using codeql for static code analysis in 7183f5acc3,
June 2020.

Since then, not a single commit has been merged into the source code
repository citing codeql as source or reason. Yet, it keeps getting
updated and we get constant reminders to upgrade the pinning it to the
latest hash.

During 4.5 years with intense development and significant code churn.
While Coverity, scan-build and CodeSonar have belped us point out many
mistakes, codeql has remained silent (or had false positives).

For this little gain, I think we spend a disproportionate amount of work
on codeql maintanance.

We can try again in a future if we think it improves.

Assisted-by: Viktor Szakats
Closes #15798
This commit is contained in:
Daniel Stenberg 2024-12-21 14:58:24 +01:00
parent 5bdcaa76d1
commit 173805b2e7
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 0 additions and 91 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.github/scripts/spellcheck.words vendored
View file

@ -121,8 +121,6 @@ CMakeLists
CNA
CNAME
CNAMEs
CodeQL
codeql
CODESET
codeset
Comcast