Default setup now includes scheduled scans and supports all languages covered by CodeQL
Blog post from GitHub
Recent enhancements have been made to streamline the enablement process for code scanning, with the introduction of a default setup that allows for automatic activation of code scanning in just a few clicks. This improvement facilitates rapid scalability across multiple repositories or entire organizations while providing flexibility for both organizational and personal repositories. The default setup now includes automatic scheduling of weekly scans, enhancing security by detecting and addressing new vulnerabilities regularly. It supports all CodeQL-compatible languages, including C, C++, JavaScript, and Python, with a feature that automatically deselects any language that fails during configuration, ensuring optimal setup. This system self-adjusts to accommodate new languages added to repositories, maintaining a seamless developer experience. GitHub remains dedicated to advancing software security without compromising user experience, with further information available in their getting started guide.