Add support for managing languages supported by Default Setup #891
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
There was a problem hiding this comment.
Pull Request Overview
This PR adds Code Scanning Default Setup enforcement capabilities to safe-settings, allowing organizations to control which programming languages can be scanned by GitHub's Code Scanning Default Setup feature.
Key changes:
- New
code_scanningplugin to validate and enforce language restrictions for Code Scanning Default Setup - Schema definition for code scanning configuration with allowed/blocked language lists
- Webhook handler for
workflow_run.completedevents to trigger reactive validation - Documentation updates explaining the feature and configuration options
Reviewed Changes
Copilot reviewed 6 out of 6 changed files in this pull request and generated 6 comments.
Show a summary per file
| File | Description |
|---|---|
| schema/settings.json | Adds JSON schema definition for code_scanning configuration with language validation enums |
| lib/settings.js | Registers the new code_scanning plugin in the plugins list |
| lib/plugins/code_scanning.js | Implements the core logic for validating and enforcing language restrictions |
| index.js | Adds webhook handler to trigger validation when Code Scanning workflows complete |
| docs/sample-settings/settings.yml | Provides example configuration for code scanning enforcement |
| README.md | Documents the feature, usage, and behavior |
Comments suppressed due to low confidence (2)
lib/plugins/code_scanning.js:3
- Unused variable MergeDeep.
const MergeDeep = require('../mergeDeep')
lib/plugins/code_scanning.js:5
- Unused variable ignorableFields.
const ignorableFields = []
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <[email protected]>
decyjphr
requested changes
Nov 10, 2025
Co-authored-by: Yadhav Jayaraman <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Creating for collaboration and feedback