CHORE: CodeQL ADO pipeline task by bewithgaurav · Pull Request #259 · microsoft/mssql-python
Work Item / Issue Reference
Summary
This pull request adds a new CodeQL security analysis job to the pr-validation-pipeline.yml to improve automated security scanning of the codebase. The changes introduce a dedicated container for the CodeQL job, install necessary dependencies, and ensure the C++ extension is built for analysis.
Security and CI pipeline enhancements:
- Added a new
CodeQLAnalysisjob to the pipeline to perform CodeQL security analysis, including initialization and finalization steps. - Introduced a
codeqlContainerusing theubuntu:20.04image to provide a consistent environment for CodeQL analysis. - Added steps to install build dependencies and Python 3.13, and to install Python requirements needed for CodeQL.
- Included a step to build the C++ extension (
mssql_python/pybind/build.sh) as part of the CodeQL analysis process.