robojerk/codeql-action

Add comment explaining workaround

Browse source
This commit is contained in:
Michael B. Gale 2023-10-04 19:57:11 +01:00
parent 41a13ec084
commit bb70bab648
No known key found for this signature in database
GPG key ID: FF5E2765BD00628F
3 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/init-action.ts
View file

@ -328,7 +328,10 @@ async function run() {
);
}
// https://github.com/github/codeql-team/issues/2411
// Go 1.21 and above ships with statically linked binaries on Linux. CodeQL cannot currently trace custom builds
// where the entry point is a statically linked binary. Until that is fixed, we work around the problem by
// replacing the `go` binary with a shell script that invokes the actual `go` binary. Since the shell is typically
// dynamically linked, this provides a suitable entry point for the CodeQL tracer.
if (
config.languages.includes(Language.go) &&
process.platform === "linux" &&