robojerk/codeql-action
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2651 commits 0 branches 1 tag 471 MiB
Commit graph

2651 commits

This branch
This branch
All branches
Author SHA1 Message Date
Andrew Eisenberg
6fabde2be8 Add packs and queries from input 
This commit adds the packs and queries from the actions input to the
config file used by the CodeQL CLI.

When the `+` is used, the actions input value is combined with the
config value and when it is not used, the input value overrides the
config value.

This commit also adds a bunch of integration tests for this feature.
In order to avoid adding too many new jobs, all of the tests are
run sequentially in a single job (matrixed across relevant operating
systems and OSes).
 2022-06-28 14:07:51 -07:00
Andrew Eisenberg
237260b693 Revert "Revert usage of --codescanning-config flag" 
This reverts commit 43d066495c.
 2022-06-28 13:03:04 -07:00
Cornelius Riemenschneider
e8c48cc8cf
Merge pull request #1128 from github/criemen/lua-tracer-ff-2 
Simplify tests for the Lua tracer FF in analyze-action.
 2022-06-28 12:52:24 +02:00
Cornelius Riemenschneider
1616e0ef98 Simplify tests for the Lua tracer FF in analyze-action. 2022-06-28 10:29:00 +00:00
Cornelius Riemenschneider
b40cd0390c
Merge pull request #1120 from github/criemen/lua-tracer-ff-2 
Honor the Lua tracer FF for `database trace-command` invocations for scanned languages.
 2022-06-28 11:19:44 +02:00
Cornelius Riemenschneider
821fe9b476
Merge branch 'main' into criemen/lua-tracer-ff-2 2022-06-28 10:43:04 +02:00
Chuan-kai Lin
37d8b5142f
Merge pull request #1123 from github/cklin/codeql-cli-2.10.0 
Update default CodeQL version to 2.10.0
 2022-06-27 10:20:30 -07:00
Cornelius Riemenschneider
ab7316e0c5 Implement unit tests for reading the Lua tracer FF in analyze-action. 2022-06-27 16:04:29 +00:00
Cornelius Riemenschneider
f422a50448 Honor the Lua tracer FF for database trace-command invocations for scanned languages. 
In theory, a scanned language will not setup the build tracer, and so
shouldn't care about lua versus legacy tracing. However, `go` is a
special case where the autobuilder runs under the build tracer, that
then gets disabled immediately again, unless a special environment
variable is used.
Therefore, we need to thread through the feature flag to this
`database trace-command` invocation. For other scanned languages,
this should be a no-op, as no tracing is ever set up.
 2022-06-27 16:04:29 +00:00
Chuan-kai Lin
ed40e306f5 Update default CodeQL version to 2.10.0 2022-06-27 09:01:12 -07:00
Andrew Eisenberg
47bcabd3e8
Merge pull request #1116 from github/aeisenberg/multi-lang-packs 
Allow scans with packs for languages not being scanned
 2022-06-24 16:47:56 -07:00
Andrew Eisenberg
b9deefbe0a
Merge branch 'main' into aeisenberg/multi-lang-packs 2022-06-24 15:12:24 -07:00
Andrew Eisenberg
7c4d0e0f6e
Merge pull request #1124 from github/aeisenberg/poetry-python2 
Disable python2 + poetry
 2022-06-24 13:50:46 -07:00
Andrew Eisenberg
b38dc80666
Merge branch 'main' into aeisenberg/multi-lang-packs 2022-06-24 11:20:12 -07:00
Andrew Eisenberg
e0411511a5
Update CHANGELOG.md 
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
 2022-06-24 11:20:06 -07:00
Andrew Eisenberg
c08ab55e3d
Merge branch 'main' into aeisenberg/poetry-python2 2022-06-24 10:44:08 -07:00
Andrew Eisenberg
934c0340a7 Update CHANGELOG.md 2022-06-24 10:21:24 -07:00
Andrew Eisenberg
c18b1d6732 Update changelog 2022-06-24 10:16:08 -07:00
Andrew Eisenberg
8bfe3c6be5 Disable python2 + poetry 2022-06-24 10:09:46 -07:00
Andrew Eisenberg
4efa7d6115
Merge pull request #1119 from github/aeisenberg/runner-dependabot-fix 
Fix dependabot warnings in runner
 2022-06-24 09:09:13 -07:00
Andrew Eisenberg
c699821722 Update runner dependencies 2022-06-23 11:46:42 -07:00
Andrew Eisenberg
7fa4dc3512 Fix dependabot warnings in runner 
Note that this changes the lock file format
from 1 to 2, so there are many changes here.
 2022-06-23 10:33:54 -07:00
Andrew Eisenberg
a965b69658
Merge pull request #1118 from github/mergeback/v2.1.14-to-main-41a4ada3 
Mergeback v2.1.14 refs/heads/releases/v2 into main
 2022-06-22 21:28:54 -07:00
github-actions[bot]
3b151b1bde Update checked-in dependencies 2022-06-23 00:11:35 +00:00
github-actions[bot]
f9fd90ed60 Update changelog and version after v2.1.14 2022-06-22 23:54:13 +00:00
Andrew Eisenberg
41a4ada31b
Merge pull request #1114 from github/update-v2.1.14-2e0c6caf 
Merge main into releases/v2
 2022-06-22 16:52:17 -07:00
Andrew Eisenberg
e524cd64db Update branch names for check-for-conflicts.yml job 2022-06-22 16:07:46 -07:00
Andrew Eisenberg
1653a84fbc Allow scans with packs for languages not being scanned 
Previously, we were being too strict about checking that a pack's
language was being scanned. It was a failure if a pack language
was specified for a language not being scanned.
 2022-06-22 14:37:31 -07:00
github-actions[bot]
08f9ac4674 Update changelog for v2.1.14 2022-06-22 14:37:09 +00:00
Andrew Eisenberg
2e0c6caf16
Merge pull request #1111 from github/aeisenberg/revert-1098 
Revert "Add capability to filter queries #1098"
 2022-06-21 14:25:59 -07:00
Andrew Eisenberg
99d4397d88 Revert "Add capability to filter queries #1098" 
https://github.com/github/codeql-action/pull/1098
This reverts commit 777b778409.
This reverts commit 59ca9b59cb.
This reverts commit eec34d5f05.
This reverts commit 40b280032c.
 2022-06-21 13:49:33 -07:00
Edoardo Pirovano
47dc295f08
Merge pull request #1110 from github/edoardo/case-insensitive-update 
Fix issue with required checks sync script
 2022-06-21 15:10:59 +01:00
Edoardo Pirovano
5a6f006e4d Fix issue with required checks sync script 2022-06-21 13:20:45 +01:00
Edoardo Pirovano
ceacebd3ff
Merge pull request #1108 from github/mergeback/v2.1.13-to-main-d00e8c09 
Mergeback v2.1.13 refs/heads/releases/v2 into main
 2022-06-21 12:56:32 +01:00
Edoardo Pirovano
d069ed5c71
Merge branch 'main' into mergeback/v2.1.13-to-main-d00e8c09 2022-06-21 11:26:28 +01:00
github-actions[bot]
0e17d37ac3 Update checked-in dependencies 2022-06-21 10:23:20 +00:00
Cornelius Riemenschneider
2318cf79e9
Merge pull request #1106 from github/criemen/bump-lua-tracer-version 
Bump lua tracer version requirement.
 2022-06-21 11:44:40 +02:00
github-actions[bot]
b2786f5323 Update changelog and version after v2.1.13 2022-06-21 09:43:31 +00:00
Edoardo Pirovano
d00e8c09a3
Merge pull request #1107 from github/update-v2.1.13-31367d4e 
Merge main into releases/v2
 2022-06-21 10:41:43 +01:00
github-actions[bot]
8bd4419d1e Update changelog for v2.1.13 2022-06-21 08:59:28 +00:00
Cornelius Riemenschneider
99acb8dda6 Bump lua tracer version requirement. 
The old version had a bug related to go autobuilding, so we only want to
respect the feature flag for the version that has the fix.
 2022-06-20 14:05:26 +00:00
Edoardo Pirovano
31367d4e57
Merge pull request #1100 from github/edoardo/2.9.4-bump 
Update default CodeQL version to 2.9.4
 2022-06-20 14:46:48 +01:00
Edoardo Pirovano
ccf5d70ab3
Update default CodeQL version to 2.9.4 2022-06-20 09:39:11 +01:00
Andrew Eisenberg
30fe0a56d2
Merge pull request #1103 from github/aeisenberg/fix-required-checks-script 
Ensure there are no duplicates when sending up required checks
 2022-06-17 15:48:46 +02:00
Andrew Eisenberg
7adb33da1d Ensure there are no duplicates when sending up required checks 
This breaks the API. Also, fix the checks that had duplicate names.
 2022-06-16 20:31:29 -07:00
Andrew Eisenberg
2e111b27f7
Merge pull request #1102 from github/aeisenberg/fix-query-filters-test 
Fix input to action
 2022-06-17 03:56:40 +02:00
Andrew Eisenberg
c7785f6b91 Fix input to action 2022-06-16 18:34:04 -07:00
Andrew Eisenberg
2e80c74b1b
Merge pull request #1096 from github/aeisenberg/check-sarif-action 
Add the check-sarif action
 2022-06-16 03:39:00 +02:00
Andrew Eisenberg
80ecdcdf69 Merge pull request #1098 from github/aeisenberg/remove-queries 
Add capability to filter queries
 2022-06-15 17:52:46 -07:00
Andrew Eisenberg
7c412c67ba
Merge branch 'aeisenberg/check-sarif-action' into aeisenberg/remove-queries 2022-06-16 02:42:30 +02:00