pyrig-codeql
A pyrig plugin that integrates GitHub CodeQL.
Overview
pyrig-codeql is a pyrig plugin that adds
GitHub CodeQL analysis to your project's health-check workflow.
What it adds
- CodeQL analysis — analyzes Python and GitHub Actions code.
- Health-check integration — adds CodeQL to the aggregate health-check gate.
- Source-only analysis — excludes the project's
tests/directory from CodeQL analysis.
Usage
Add the plugin as a development dependency, then synchronize your project:
uv add pyrig-codeql --dev
uv run pyrig sync
The plugin requires Python 3.12 or newer.
Documentation
Full documentation, including the auto-generated API reference, is available on the documentation site.
Metadata
Release files for pyrig-codeql 1.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| pyrig_codeql-1.2.0.tar.gz | 7.4 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| pyrig_codeql-1.2.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 17.6 kB
Release files / pyrig_codeql-1.2.0.tar.gz
| Download URL | pyrig_codeql-1.2.0.tar.gz |
|---|---|
| Size | 7.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8d24afa1c1342960db24b9ed6ef0b129615e233a3e81cba4dc23a921ec232650
|
|
BLAKE2b-256 checksum How to use checksums |
b2e44c11af725aa19a6483c23a656a5e4d8693196c7c971d0ace6c1bbc96837b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / pyrig_codeql-1.2.0-py3-none-any.whl
| Download URL | pyrig_codeql-1.2.0-py3-none-any.whl |
|---|---|
| Size | 10.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
2243a1ff3f7cd2fa446dd653dce92ad2bfaa00be83adf5cf6b1c010b69219698
|
|
BLAKE2b-256 checksum How to use checksums |
853e42d2bde5d37d5f07049f97469a05a775d5fd766dee9266cfd2ecda9e739b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for pyrig-codeql 1.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.