CHORE: CodeQL ADO pipeline task by bewithgaurav · Pull Request #259 · microsoft/mssql-python

Work Item / Issue Reference

AB#38859


Summary

This pull request adds a new CodeQL security analysis job to the pr-validation-pipeline.yml to improve automated security scanning of the codebase. The changes introduce a dedicated container for the CodeQL job, install necessary dependencies, and ensure the C++ extension is built for analysis.

Security and CI pipeline enhancements:

  • Added a new CodeQLAnalysis job to the pipeline to perform CodeQL security analysis, including initialization and finalization steps.
  • Introduced a codeqlContainer using the ubuntu:20.04 image to provide a consistent environment for CodeQL analysis.
  • Added steps to install build dependencies and Python 3.13, and to install Python requirements needed for CodeQL.
  • Included a step to build the C++ extension (mssql_python/pybind/build.sh) as part of the CodeQL analysis process.