Hi Rich,
On Thu, Dec 1, 2022 at 2:50 AM Richard Megginson <rmeggins(a)redhat.com> wrote:
LGTM is being deprecated in favor of CodeQL -
https://github.blog/2022-08-15-the-next-step-for-lgtm-com-github-code-sca...
They have submitted several PRs to system roles repos to switch from LGTM to CodeQL -
https://github.com/linux-system-roles/storage/pull/309
Questions for the community:
* Do we need LGTM? Is it useful? Can you give us an example of a problem found by LGTM
that would not have been found otherwise?
* Does anyone have any experience with CodeQL? How is it?
My understanding from reading the blog post above and chatting to people
in other affected communities is that LGTM is being completely shutdown &
replaced with CodeQL (AIUI Microsoft bought LGTM awhile back and have
now apparently incorporated all its features into CodeQL).
If LGTM isn't useful, I'd like to get rid of it.
If LGTM is useful, I'll merge the PRs (and remove .lgtm.yml from our repos)
Or perhaps there is a better tool we should use instead?
Not that I know of. We use Coverity (in addition) on several other projects
I work on but not sure that's particularly useful in an Ansible context.
cheers.
--
Nathan
_______________________________________________
systemroles mailing list -- systemroles(a)lists.fedorahosted.org
To unsubscribe send an email to systemroles-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/systemroles@lists.fedorahost...
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue