The Next Step for LGTM.com: GitHub Code Scanning!
This article discusses the deprecation of LGTM.com and the transition to GitHub code scanning. LGTM.com's key features are now integrated into GitHub code scanning, offering enhanced capabilities. This transition ensures a smoother, more integrated security experience for developers.
Key Dates and Milestones
- End of August 2022: No new user sign-ups or repository additions will be accepted on LGTM.com. Existing users can still log in and access existing repositories, but only new commits will be analyzed; historical analysis will cease.
- October 2022: GitHub will assist in migrating repositories from LGTM.com to GitHub code scanning. Pull requests will be created to add GitHub Actions workflows, enabling seamless code scanning integration.
- End of November 2022: LGTM.com will stop fetching new commits and analyzing pull requests.
- December 16, 2022: LGTM.com will be officially shut down. This includes all features, such as code quality badges, the query console, documentation, and APIs.
Transitioning to GitHub Code Scanning
GitHub code scanning, powered by CodeQL, offers all the functionality of LGTM.com and more. The transition involves adding a GitHub Actions workflow to your repository. This workflow will automatically scan your code for potential security vulnerabilities, providing alerts directly within pull requests and the repository's security tab.
For repositories with complex configurations, manual migration might be necessary. GitHub will directly notify affected users.
Frequently Asked Questions
- How do I get started with GitHub code scanning? Refer to the GitHub getting started guide for detailed instructions on enabling code scanning and other security features.
- Can I continue using the LGTM.com query console? If you heavily rely on the LGTM.com query console, consider joining the beta program to test the equivalent functionality on GitHub. Leave a note if you are an active user and not in the beta program.
- Where can I ask questions or leave feedback? Participate in the dedicated GitHub Discussion thread for this topic.
- How can I download data from LGTM.com before it goes offline? Explore the various APIs available on LGTM.com to download your data.
Conclusion
The deprecation of LGTM.com marks a significant step towards a more streamlined and integrated security experience within the GitHub ecosystem. GitHub's commitment to secure software development is evident in this transition, ensuring developers have access to the best tools and resources available. The team expresses gratitude to all LGTM.com users for their support and participation throughout the years.