CodeQL: add 'False positive' issue template #11276
Conversation
|
|
||
| <!-- | ||
| 1. Open the project on GitHub.com. | ||
| 2. Switch to the `Security` tab. For example, https://lgtm.com/projects/g/pallets/click/alerts/. |
There was a problem hiding this comment.
I think that this URL should be updated to a code-scanning URL
There was a problem hiding this comment.
Good catch. I removed that URL. Such URLs are inaccessible for others, so a real example would just be a dead link for most viewers.
Co-authored-by: Pierre <turbo@github.com>
| about: Report CodeQL alerts that you think should not have been detected (not applicable, not exploitable, etc.) | ||
| title: False positive | ||
| labels: false-positive | ||
| assignees: '' |
There was a problem hiding this comment.
Do we want to assign this to the first responder automatically? @github/codeql-first-responder
There was a problem hiding this comment.
I don't think that will work - we can't assign teams to issues, only individuals. If we put the handle in the issue template body, the issue creator would need to be a member of our org to actually notify a team in our org.
There was a problem hiding this comment.
Ah...didn't know that. I am happy with this template, though. @turbo should probably approve since he had some suggestions earlier.
No description provided.