🛡️ Test & Secure STEP 09 / 15 ⏱ 2 min ⏳ 97 min left

TEST & SECURE: CodeQL

What it finds: CodeQL uses static analysis to detect security issues like XSS and SQL injection.
When it runs: A full scan of the default branch runs the moment you enable it, then on every push to the default branch, every PR, and on a weekly schedule (not just on PRs).
Where to see results: All alerts show up in the repository&#39;s Security tab → Code scanning . On PRs, findings appear inline as comments on the affected lines.

Turn on CodeQL to scan your code for security vulnerabilities with static analysis.