What is the primary function of Code Scanning?

What is the primary function of Code Scanning?

• A. Receiving alerts for problematic code and identifying vulnerabilities before merge using automated CodeQL scans
• B. Generating code documentation
• C. Tracking issues in a project board
• D. Formatting code to a standard style

Answer: (A)

Code Scanning is about finding security vulnerabilities in the code before it’s merged, using automated analyses like CodeQL to scan across languages for insecure patterns and potential weaknesses. This approach surfaces alerts and actionable findings early in the development process, helping developers fix issues before they reach production and reducing the risk of security breaches. It’s focused on security analysis and vulnerability detection, rather than tasks like generating documentation, tracking project work, or enforcing formatting, which is why it’s the best description of its primary function.

Code Scanning is about finding security vulnerabilities in the code before it’s merged, using automated analyses like CodeQL to scan across languages for insecure patterns and potential weaknesses. This approach surfaces alerts and actionable findings early in the development process, helping developers fix issues before they reach production and reducing the risk of security breaches. It’s focused on security analysis and vulnerability detection, rather than tasks like generating documentation, tracking project work, or enforcing formatting, which is why it’s the best description of its primary function.