robojerk/codeql-action

Comment why we don't run multiple autobuilders for other languages

Browse source
This commit is contained in:
Henry Mercer 2022-09-12 18:25:20 +01:00
parent 40e0374c6f
commit bde5694fb7
3 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
lib/autobuild.js generated
View file

@ -74,6 +74,13 @@ async function determineAutobuildLanguages(config, featureFlags, logger) {
languages.push(languages_1.Language.go);
}
logger.debug(`Will autobuild ${languages.join(" and ")}.`);
// In general the autobuilders for other traced languages may conflict with
// each other. Therefore if a user has requested more than one non-Go traced
// language, we ask for manual build steps.
// Matrixing the build would also work, but that would change the SARIF
// categories, potentially leading to a "stale tips" situation where alerts
// that should be fixed remain on a repo since they are linked to SARIF
// categories that are no longer updated.
if (autobuildLanguagesNoGo.length > 1) {
logger.warning(`We will only automatically build ${languages.join(" and ")} code. If you wish to scan ${autobuildLanguagesNoGo
.slice(1)