GitHub操作: CodeQL分析结果

Question

我已经通过网站在我的github项目中集成了CodeQL。它工作，它分析和产生SARIF文件。然后它会显示结果已成功上传：

Uploading results
  Processing sarif files: ["/home/runner/work/my_project/results/cpp-builtin.sarif"]
  Uploading results
  Successfully uploaded results

哪里?我可以在哪里找到这些结果并阅读它们？CodeQL如何指示发现了问题？我的.yaml包含：

    - run: |
       sudo -n apt-get install -y autopoint gettext
       autoreconf --install
       ./configure
       make
    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@v1

Answer 1

GitHub存储库->安全选项卡->代码扫描警报

GitHub docs