37308223727
26%

Ran 05 Oct 2026 12:21PM UTC

Jobs 1

Files 20

Run time 1min

Badge

Embed ▾

Committed 05 Oct 2026 12:15PM UTC coverage: 25.576%. Remained the same

Build # 37308223727

Build Type

push

github

Committed by

web-flow

Commit Message

sec: migrate to GHAS CodeQL (#622)

## Description

Migrate from the legacy Checkmarx One (`sec-scanners-config.yaml`) SAST
pipeline to **GHAS CodeQL**, mirroring the reference migration in
[kyma-infrastructure-manager#1586](https://github.com/kyma-project/kyma-infrastructure-manager/pull/1586).

This PR adds:
- `.github/workflows/codeql.yml` — CodeQL workflow scanning Go code
(manual build via `make build-for-codeql`) and GitHub Actions workflows.
- A `build-for-codeql` Makefile target used by the workflow.

Per the migration issue, `sec-scanners-config.yaml` will be removed in a
**follow-up PR** only after the first CodeQL scan is verified active on
`main` ("the final confirmation step, not the first").

## Related

Part of https://github.tools.sap/kyma/backlog/issues/10544

Coverage Stats

722 of 2823 relevant lines covered (25.58%)

0.26 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	37308223727.1	05 Oct 2026 12:21PM UTC	20	25.58	GitHub Action Run

kyma-project / compass-manager / 37308223727
26%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 37308223727

kyma-project / compass-manager / 37308223727 26%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 37308223727

kyma-project / compass-manager / 37308223727
26%

README BADGES
x