As an alternative to running Varredura de código within GitHub, you can perform analysis elsewhere and then upload the results. Alerts for Varredura de código that you run externally are displayed in the same way as those for Varredura de código that you run within GitHub. For more information, see "Managing Varredura de código alerts for your repository."
If you use a third-party static analysis tool that can produce results as Static Analysis Results Interchange Format (SARIF) 2.1.0 data, you can upload this to GitHub. For more information, see "Uploading a SARIF file to GitHub."
Integrations with webhooks
You can use Varredura de código webhooks to build or set up integrations, such as Aplicativos do GitHub or Aplicativos OAuth, that subscribe to Varredura de código events in your repository. For example, you could build an integration that creates an issue on GitHub or sends you a Slack notification when a new Varredura de código alert is added in your repository. For more information, see "Creating webhooks" and "Webhook events and payloads."