Discuss Microsoft GH-500 Exam Topic 3 Question 18

-- [Use Code Scanning with CodeQL]

Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? (Each answer presents part of the solution. Choose three.)

Suggested Answer: B, C, D

When integrating CodeQL outside of GitHub Actions (e.g., in Jenkins, CircleCI):

Install the CLI: Needed to run CodeQL commands.

Analyze code: Perform the CodeQL analysis on your project with the CLI.

Upload scan results: Export the results in SARIF format and use GitHub's API to upload them to your repo's security tab.

You don't need to write custom queries unless extending functionality. ''Processing alerts'' happens after GitHub receives the results.

Get Premium GH-500 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

23 comments · newest first

Vanna 3 days ago

Right, without the CLI, nothing works.

Joseph 8 days ago

Agree! Installing the CLI is crucial first.

Arminda 14 days ago

I think D, B, and C are key steps.

Vanna 19 days ago

This question is tricky!

Junita 24 days ago

Exactly! That's the best approach.

Miles 29 days ago

So, install CLI, analyze code, and upload results?

Breana 1 month ago

True, focus on the main steps first.

Junita 1 month ago

Writing queries is important, but not for initial integration.

Miles 1 month ago

Agreed! But what about writing queries?

Breana 2 months ago

Then we should upload scan results.

Junita 2 months ago

Yes, after installing the CLI.

Miles 2 months ago

Analyzing code comes next, right?

Breana 2 months ago

Definitely! Without it, nothing works.

Junita 2 months ago

I think installing the CLI is crucial first.

Marcos 3 months ago

Not sure about that, I thought analyzing code was optional.

Edelmira 3 months ago

Agree with A, B, and C for sure!

Melissia 3 months ago

Wait, do we really need to write queries? Seems complicated!

Galen 3 months ago

I think uploading scan results is crucial too.

Maryln 3 months ago

Definitely need to install the CLI first!

Helaine 3 months ago

Writing queries sounds familiar, but I can't remember if it's necessary for the initial setup or comes later in the process.

Heike 4 months ago

I feel like uploading scan results is also part of the integration process, but I can't recall if it's one of the first steps.

Letha 4 months ago

I'm not entirely sure about the order, but I remember something about analyzing code being important too.

Iluminada 4 months ago

I think we definitely need to install the CLI first, right? That seems like a crucial step.

Microsoft GH-500 Exam - Topic 3 Question 18 Discussion