robojerk/codeql-action

Add comment explaining workaround

Browse source
This commit is contained in:
Michael B. Gale 2023-10-04 19:57:11 +01:00
parent 41a13ec084
commit bb70bab648
No known key found for this signature in database
GPG key ID: FF5E2765BD00628F
3 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/init-action.js generated
View file

@ -170,7 +170,10 @@ async function run() {
core.exportVariable("GOFLAGS", goFlags);
core.warning("Passing the GOFLAGS env parameter to the init action is deprecated. Please move this to the analyze action.");
}
// https://github.com/github/codeql-team/issues/2411
// Go 1.21 and above ships with statically linked binaries on Linux. CodeQL cannot currently trace custom builds
// where the entry point is a statically linked binary. Until that is fixed, we work around the problem by
// replacing the `go` binary with a shell script that invokes the actual `go` binary. Since the shell is typically
// dynamically linked, this provides a suitable entry point for the CodeQL tracer.
if (config.languages.includes(languages_1.Language.go) &&
process.platform === "linux" &&
!(0, tools_features_1.isSupportedToolsFeature)(versionInfo, tools_features_1.ToolsFeature.IndirectTracingSupportsStaticBinaries)) {

2
lib/init-action.js.map
View file

File diff suppressed because one or more lines are too long

5
src/init-action.ts
View file

@ -328,7 +328,10 @@ async function run() {
);
}
// https://github.com/github/codeql-team/issues/2411
// Go 1.21 and above ships with statically linked binaries on Linux. CodeQL cannot currently trace custom builds
// where the entry point is a statically linked binary. Until that is fixed, we work around the problem by
// replacing the `go` binary with a shell script that invokes the actual `go` binary. Since the shell is typically
// dynamically linked, this provides a suitable entry point for the CodeQL tracer.
if (
config.languages.includes(Language.go) &&
process.platform === "linux" &&