Security scanning

[raphael-theriault-swi]

Using both CodeQL on every commit + weekly and RL on release. RL can also be run without publishing if needed.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[Copilot]

Pull request overview

Adds automated security scanning in GitHub Actions by introducing a CodeQL workflow for continuous analysis and extending the release workflow with an optional ReversingLabs (RL) scan and publish/scan toggles.

Changes:

• Added a new CodeQL workflow to run on pushes to main, pull requests, and a weekly schedule.
• Updated the Release workflow to accept publish and scan inputs and conditionally run publish-related jobs.
• Added an RL scanning job that packages build artifacts and submits them to the RL cloud scanner.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File	Description
.github/workflows/release.yaml	Adds workflow_dispatch inputs to gate publishing, and introduces an RL scan job in the release pipeline.
.github/workflows/codeql.yaml	New workflow enabling CodeQL analysis for Rust and GitHub Actions on push/PR + weekly schedule.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.