Skip to main content

エンタープライズでのコードスキャン用のセルフホステッドランナーの構成

Enterprise に対して code scanning を有効、構成、無効にすることができます。GitHub ホステッド ランナーを使用する必要はありません。 Code scanning を使用すると、コードの脆弱性やエラーをスキャンできます。

この機能を使用できるユーザーについて

Code scanning は、次のリポジトリの種類で使用できます。

  • GitHub.com 上のパブリックリポジトリ
  • GitHub Team、GitHub Enterprise Cloud、または GitHub Enterprise Server 上の組織所有リポジトリ。 GitHub Code Security が 有効になっています。

Provisioning a self-hosted runner

メモ

GitHub can run code scanning using a GitHub Actions workflow. First, you need to provision one or more self-hosted GitHub Actions runners in your environment. You can provision self-hosted runners at the repository, organization, or enterprise account level. See Self-hosted runners and Adding self-hosted runners.

If you are provisioning a self-hosted runner for CodeQL analysis, your runner must use a CodeQL-supported operating system version and CPU architecture. See the CodeQL system requirements.

If you are using default setup for code scanning, you can assign self-hosted runners with the default code-scanning label, or you can optionally give them custom labels so that individual repositories can use different runners. See Configuring default setup for code scanning.

For information about using default setup for code scanning analysis of compiled languages, see CodeQL code scanning for compiled languages.

You must ensure that Git is in the PATH variable on any self-hosted runners you use to run CodeQL actions.

メモ

If you use CodeQL code scanning to analyze code written in Python in your enterprise, you must make sure that your self-hosted runner has Python 3 installed.