Which feature runs by default in CodeQL code scanning on GitHub?

• A. code-scanning
• B. security-extended
• C. secruity-and-quality
• D. Path Queries

Answer: (A)

Code-scanning runs by default in GitHub's CodeQL code scanning. When you enable Code scanning, GitHub automatically executes the CodeQL analysis using the built-in workflow (the codeql-analysis.yml) so your repository is scanned across languages and issues are surfaced as code-scanning alerts in the Security tab. This default setup provides vulnerability and quality signals right away, triggered by common events like pushes and pull requests. Path Queries are a specific querying technique within CodeQL for tracing data flow along paths and aren’t a separate default feature, while the other named options don’t represent standard default capabilities in GitHub’s Code Scanning.