Question

You administer a GitHub Enterprise Cloud organization. A development team needs CodeQL code scanning enabled on a JavaScript repository. They want the fastest possible way to get scanning running, but a separate legacy C/C++ repository requires a custom build command and a specific compiler toolchain before CodeQL can analyze it. Which configuration approach correctly satisfies both repositories?

Accepted Answer

Use CodeQL default setup for the JavaScript repository and advanced setup with a custom workflow file for the C/C++ repository

Answer

Use advanced setup for both repositories because default setup does not support any compiled or interpreted languages

Answer

Use default setup for both repositories and add the custom build command through the repository's Dependabot configuration

Answer

Enable secret scanning on both repositories, since CodeQL default setup only runs after secret scanning completes