robojerk/codeql-action

Merge pull request #1945 from github/henrymercer/authenticate-api-url

Browse source 
Authenticate when downloading CodeQL Bundle from GHES API
This commit is contained in:
Henry Mercer 2023-10-12 19:02:05 +01:00 • committed by GitHub
commit 82ba90b1d9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 8 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/setup-codeql.ts
View file

@ -546,7 +546,10 @@ export async function downloadCodeQL(
let authorization: string | undefined = undefined;
if (searchParams.has("token")) {
logger.debug("CodeQL tools URL contains an authorization token.");
} else if (codeqlURL.startsWith(`${apiDetails.url}/`)) {
} else if (
codeqlURL.startsWith(`${apiDetails.url}/`) ||
(apiDetails.apiURL && codeqlURL.startsWith(`${apiDetails.apiURL}/`))
) {
logger.debug("Providing an authorization token to download CodeQL tools.");
authorization = `token ${apiDetails.auth}`;
} else {