actions/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action synced 2026-10-07 00:30:17 +03:00
Code Issues Packages Projects Releases Wiki Activity
10,594 Commits 445 Branches 589 Tags
main
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Angela P Wen 41aa437638 Merge pull request #2841 from github/angelapwen/log-init-post-telemetry 
Add logs around status report telemetry in `init-post` step
 2025-04-03 14:51:03 +02:00
Angela P Wen 92864f48b0 Add logs around status report telemetry in init-post step 2025-04-03 14:37:27 +02:00
Angela P Wen dab8a02091 Merge pull request #2836 from github/dependabot/github_actions/actions-02c935407f 
build(deps): bump the actions group with 2 updates
 2025-04-02 14:57:29 +02:00
Angela P Wen 10771737a9 Merge pull request #2840 from github/dependabot/npm_and_yarn/npm-05c8aca45e 
build(deps-dev): bump the npm group across 1 directory with 4 updates
 2025-04-02 14:56:55 +02:00
Angela P Wen 17379bcd20 Manually update PR check workflow 2025-04-02 14:43:55 +02:00
Angela P Wen 6a151cd774 Merge pull request #2811 from github/dependabot/github_actions/actions-c2c311daa1 
build(deps): bump ruby/setup-ruby from 1.222.0 to 1.226.0 in the actions group
 2025-03-17 12:15:27 -07:00
Angela P Wen 7866bcdb1b Manually bump workflow to match autogenerated file 2025-03-17 12:00:05 -07:00
Angela P Wen f544ec5e4a Merge pull request #2791 from github/dependabot/npm_and_yarn/npm-24c237cb71 
build(deps): bump the npm group with 9 updates
 2025-03-03 10:56:56 -08:00
Angela P Wen 4b35b04661 Merge pull request #2792 from github/dependabot/github_actions/actions-f0e7f3112e 
build(deps): bump actions/create-github-app-token from 1.11.5 to 1.11.6 in the actions group
 2025-03-03 09:40:10 -08:00
Angela P Wen 8c69433c34 Merge pull request #2782 from github/angelapwen/fix-unversioned-immutable-action 
PR Checks: use semantic versioning for `create-github-app-token`
 2025-02-25 08:49:25 -08:00
Angela P Wen c4f2a076e5 PR Checks: use semantic versioning for create-github-app-token 2025-02-24 17:06:31 -08:00
Angela P Wen a8849fbe63 Merge pull request #2781 from github/angelapwen/fix-code-injection-warning 
Fix code injection warnings in `check-codescanning-config` internal Action
 2025-02-24 16:53:51 -08:00
Angela P Wen 628c1e669a Remove print debugging 2025-02-24 13:29:47 -08:00
Angela P Wen e12eb8d7c1 Set environment variable in the correct step 2025-02-24 13:24:22 -08:00
Angela P Wen 3b348d9a54 Debug only: print environment variable 2025-02-24 13:18:08 -08:00
Angela P Wen 7567eab606 Fail when expected config does not exist 2025-02-24 13:17:24 -08:00
Angela P Wen a9f7529f47 Quote expected-config-file-contents input 2025-02-24 13:05:29 -08:00
Angela P WenandCopilot 5e88a178fe Update .github/actions/check-codescanning-config/action.yml 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-02-24 12:52:19 -08:00
Angela P Wen c0a8eb9a67 Use $RUNNER_TEMP for good measure 
`runner.temp` is not user-controlled but we replace it with `$RUNNER_TEMP` in any case.
 2025-02-24 12:35:51 -08:00
Angela P Wen 286fd68a67 Use env var for EXPECTED_CONFIG_FILE_CONTENTS 2025-02-24 12:35:17 -08:00
Angela P Wen d3c7d03197 Merge pull request #2780 from github/angelapwen/fix-inconsistent-action-input 
Unify `token` description for `resolve-environment`, `start-proxy`, and `upload-sarif`
 2025-02-24 12:09:09 -08:00
Angela P Wen 03c921eac5 Unify token description for resolve-environment, start-proxy, and upload-sarif` 2025-02-24 11:26:00 -08:00
Angela P Wen d38c6e60df Merge pull request #2775 from github/angelapwen/bump-octokit 
Upgrade `octokit` to v4.1.2
 2025-02-19 11:31:42 -08:00
Angela P Wen c1745a9831 Upgrade octokit to v4.1.2 2025-02-19 11:13:12 -08:00
Angela P Wen ad42dbd32d Merge pull request #2750 from github/dependabot/npm_and_yarn/npm-768bd9b555 
build(deps): bump the npm group with 5 updates
 2025-02-03 10:00:42 -08:00
Angela P Wen a8f5935da0 Merge pull request #2749 from github/dependabot/github_actions/actions-29d379cebb 
build(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.2 in the actions group
 2025-02-03 09:24:29 -08:00
Angela P Wen b44b19fe8d Merge pull request #2714 from github/mergeback/v3.28.3-to-main-dd196fa9 
Mergeback v3.28.3 refs/heads/releases/v3 into main
 2025-01-22 11:34:36 -08:00
Angela P Wen dd196fa9ce Merge pull request #2713 from github/update-v3.28.3-23ec3afaf 
Merge main into releases/v3
 2025-01-22 11:13:29 -08:00
Angela P Wen 23ec3afaf8 Merge pull request #2712 from github/angelapwen/stop-debug-artifacts 
Temporarily disable uploading debug artifacts
 2025-01-22 10:53:09 -08:00
Angela P Wen 519de26711 Temporarily disable uploading debug artifacts 2025-01-22 10:35:38 -08:00
Angela P Wen 47835cd7ea Merge pull request #2684 from github/angelapwen/stop-updating-v2-branch 
Stop updating `releases/v2` branch
 2025-01-10 11:17:26 -08:00
Angela P Wen c050c40379 Stop updating releases/v2 branch 
CodeQL Action v2 is now deprecated: https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/ and this PR will prevent the automation from backporting new changes to the `v2` branch when we replease.
 2025-01-10 10:59:20 -08:00
Angela P Wen 2b9e645437 Merge pull request #2682 from github/mergeback/v3.28.1-to-main-b6a472f6 
Mergeback v3.28.1 refs/heads/releases/v3 into main
 2025-01-10 10:51:41 -08:00
Angela P Wen b6a472f63d Merge pull request #2681 from github/update-v3.28.1-ea6acbfea 
Merge main into releases/v3
 2025-01-10 10:22:58 -08:00
Angela P Wen ea6acbfeae Merge pull request #2677 from github/angelapwen/deprecate-action-v2 
Deprecate CodeQL Action v2
 2025-01-10 10:03:29 -08:00
Angela P Wen 4df151edec Merge branch 'main' into angelapwen/deprecate-action-v2 2025-01-10 08:54:32 -08:00
Angela P Wen a05a7eb09c Fix PR number in changenote 2025-01-10 08:54:07 -08:00
Angela P Wen 8d2753b250 Add public changelog blog post link 2025-01-10 08:52:16 -08:00
Angela P Wen e83e0a4f58 Merge pull request #2673 from github/dependabot/npm_and_yarn/npm-877f465710 
build(deps): bump the npm group with 3 updates
 2025-01-09 14:58:42 -08:00
Angela P Wen 03d573167f Keep OLDEST_SUPPORTED_MAJOR_VERSION to 2 for now 
So that our changes can go into `releases/v2`. We will bump `OLDEST_SUPPORTED_MAJOR_VERSION` immediately after the next release.
 2025-01-07 14:50:25 -08:00
Angela P Wen 66f5682768 Add section on adding a new major version 2025-01-07 14:50:25 -08:00
Angela P Wen 4541c135a4 [WIP] Add changenote for deprecation 2025-01-07 14:01:38 -08:00
Angela P Wen 913d60579d Remove mentions to v2 in documentation 2025-01-07 14:00:12 -08:00
Angela P Wen 04b5afaa72 Convert deprecation warning to error 2025-01-07 13:59:42 -08:00
Angela P Wen a06dbc607d Change OLDEST_SUPPORTED_MAJOR_VERSION to 3 2025-01-07 13:59:27 -08:00
Angela P Wen 5b6e617dc0 Merge pull request #2665 from github/dependabot/npm_and_yarn/npm-d4fe8e2025 
build(deps-dev): bump the npm group with 2 updates
 2024-12-23 11:01:57 -08:00
Angela P Wen adc78ec946 Merge pull request #2666 from github/dependabot/github_actions/actions-5bf302830d 
build(deps): bump actions/create-github-app-token from 1.11.0 to 1.11.1 in the actions group
 2024-12-23 10:52:13 -08:00
Angela P Wen d8f8eca6c5 Merge branch 'main' into dependabot/npm_and_yarn/npm-61c837125e 2024-12-18 16:36:02 -08:00
Angela P Wen 89757925c7 Merge pull request #2637 from github/dependabot/npm_and_yarn/npm-3bf4e64efa 
Bump the npm group with 4 updates
 2024-12-09 10:10:22 -08:00
Angela P Wen 6f9e628e6f Merge pull request #2634 from github/angelapwen/stop-using-artifact-flag 
Remove `artifact_v4_upgrade` feature flag logic and related PR checks
 2024-12-06 09:54:23 -08:00
Angela P Wen 0bb80075c0 Delete legacy artifact PR check 2024-12-04 12:05:41 -08:00
Angela P Wen 25488cc9b0 Remove deprecated CODEQL_ACTION_ARTIFACT_V4_UPGRADE env var 2024-12-04 12:05:25 -08:00
Angela P Wen 87548a27e8 Stop using the artifact_v4_upgrade feature flag 2024-12-04 12:05:11 -08:00
Angela P Wen 978ed829bd Merge pull request #2633 from github/angelapwen/legacy-artifact-default-true 
Set `ArtifactV4Upgrade`'s default value to true
 2024-12-03 15:45:57 -08:00
Angela P Wen 9922856ac1 Set ArtifactV4Upgrade's default value to true 2024-12-03 14:21:43 -08:00
Angela P Wen e782c3a145 Merge pull request #2612 from github/angelapwen/report-linux-runner-release 
Telemetry: report OS release for GitHub-hosted Linux runners
 2024-11-18 14:34:25 -08:00
Angela P Wen e3c67a01d3 Merge pull request #2610 from github/dependabot/npm_and_yarn/npm-d2ca52e617 
Bump the npm group with 4 updates
 2024-11-18 14:30:04 -08:00
Angela P Wen f9ada54538 Telemetry: report OS release for GitHub-hosted Linux runners 2024-11-18 13:42:59 -08:00
Angela P Wen 9222a972b5 Merge pull request #2611 from github/angelapwen/catch-tar-error 
Throw configuration error when `tar` is not available
 2024-11-18 11:47:05 -08:00
Angela P Wen b500b62cea Throw configuration error when tar is not available 2024-11-18 11:21:11 -08:00
Angela P Wen 6e3a010dfe Merge pull request #2583 from jsoref/use-artifact-4 
Upgrade workflows to `actions/upload-artifact@v4`
 2024-11-13 11:48:33 -08:00
Angela P Wen ad94f2fbab Merge pull request #2548 from github/angelapwen/fix-prepare-test 
PR checks: small fixups to `prepare-action`
 2024-10-16 08:27:56 -07:00
Angela P Wen 2f0f924bb0 Return early if version is linked or default 2024-10-15 16:17:38 -07:00
Angela P Wen ded11c662c PR checks: fix formatting for nightly bundle URL and stable CLI version input 2024-10-15 15:53:14 -07:00
Angela P Wen a469ecdf39 Merge pull request #2545 from github/dependabot/npm_and_yarn/npm-107f1d22a3 
Bump the npm group with 3 updates
 2024-10-14 11:39:29 -07:00
Angela P Wen 9d1e406cd6 Merge pull request #2535 from github/angelapwen/update-artifacts-tests 
PR Checks: update artifacts tests
 2024-10-08 14:42:47 -07:00
Angela P Wen dafc7dd67c PR Checks: update artifacts tests 
We are planning to make the default behavior of the `CODEQL_ACTION_ARTIFACT_V4_UPGRADE` feature flag to be true. This change updates our debug artifact PR checks so that the relevant environment variable is set to `true`, and changes the `debug-artifacts-upgrade` test to `debug-artifacts-legacy` test.
 2024-10-08 13:50:31 -07:00
Angela P Wenandgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> 572cc5268d Mergeback v3.26.12 refs/heads/releases/v3 into main (#2530) 
* Update changelog for v3.26.12

* Update changelog and version after v3.26.12

* Update checked-in dependencies

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Angela P Wen <angelapwen@github.com>
 2024-10-07 10:17:37 -07:00
Angela P Wen c36620d31a Merge pull request #2529 from github/update-v3.26.12-c9a70ff45 
Merge main into releases/v3
 2024-10-07 09:59:22 -07:00
Angela P Wenandgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> 1532671351 Update default bundle to 2.19.1 (#2519) 
* Update default bundle to codeql-bundle-v2.19.1

* Add changelog note

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Angela P Wen <angelapwen@github.com>
 2024-10-04 13:45:22 -07:00
Angela P Wen 64871a860c Merge branch 'main' into update-bundle/codeql-bundle-v2.19.1 2024-10-04 13:32:24 -07:00
Angela P Wenandgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> 15649f638c Mergeback v3.26.11 refs/heads/releases/v3 into main (#2523) 
* Update changelog for v3.26.11

* Update changelog and version after v3.26.11

* Update checked-in dependencies

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Angela P Wen <angelapwen@github.com>
 2024-10-03 13:18:38 -07:00
Angela P Wen 6db8d6351f Merge pull request #2522 from github/update-v3.26.11-8aba5f2c4 
Merge main into releases/v3
 2024-10-03 13:00:22 -07:00
Angela P Wen 868284ba01 Merge branch 'main' into update-bundle/codeql-bundle-v2.19.1 2024-10-02 17:00:15 -07:00
Angela P Wen a60db1d7ff Add notice for dependency upgrade timeline (#2513) 2024-10-02 17:35:52 +00:00
Angela P Wen 3c13be0632 Add breaking change label to changenote (#2512) 2024-10-01 15:30:15 -07:00
Angela P WenAndrew EisenbergHenry Mercer
 		a196a714b8 Bump artifact dependencies if CODEQL_ACTION_ARTIFACT_V2_UPGRADE enabled (#2482) 
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2024-10-01 09:59:05 -07:00
Angela P Wen ef130516b1 Merge pull request #2484 from github/dependabot/npm_and_yarn/npm-f8fb634f66 
Bump the npm group across 1 directory with 8 updates
 2024-09-23 10:09:36 -07:00
Angela P Wen 74e989e9a5 Stop tracking tsconfig.tsbuildinfo 2024-09-23 09:47:18 -07:00
Angela P Wen ed5036d7fa Update tsconfig.tsbuildinfo 2024-09-23 09:28:18 -07:00
Angela P Wen fe22310da9 Merge pull request #2475 from github/angelapwen/refactor-debug-artifacts-upload 
Refactor: prepare debug artifacts for `artifact` upgrades
 2024-09-13 09:47:26 -07:00
Angela P Wen bc660fcf8c Copy SARIF file to database location rather than move 2024-09-12 12:58:13 -07:00
Angela P Wen e7716806b8 Rename upload-debug-artifacts to combined-sarif-artifacts 
More accurately describes what these artifacts are, rather than the step they're uploaded in.
 2024-09-12 12:56:38 -07:00
Angela P Wen cb7faf53f6 Refactor: move combined SARIF debug artifact logic to debug-artifact 2024-09-12 12:55:49 -07:00
Angela P Wen d4bfd40513 Use .push rather than .concat 2024-09-11 16:37:04 -07:00
Angela P Wen 82ce3131fa Remove unused helper file 2024-09-11 16:36:48 -07:00
Angela P Wen 4ba244037a Rebuild: add transpiled files 2024-09-11 15:13:10 -07:00
Angela P Wen c098b253f6 Only upload upload-sarif debug artifacts at most once 
Previously, we uploaded combined SARIF artifacts in both the `analyze-post` and `upload-sarif-post` steps. This change ensures that these artifacts are uploaded at most once — in `analyze-post` if it is a first-party run and `upload-sarif-post` if it is a third-party run.

This is a defensive check because as we upgrade to the new `artifact` dependencies we will not be able to upload artifacts to the same artifact directory.
 2024-09-11 15:11:27 -07:00
Angela P Wen b296f2676c Refactor: upload all available debug artifacts in init-post 
Previously, we uploaded SARIF artifacts in the `analyze-post` step and database and log artifacts in the `init-post` step. As we migrate to the updated `artifact` dependencies, we want to switch to uploading all artifacts in one step.

In order to upload all artifacts in one go and maintain the artifacts at the root of the debug directory, we first move SARIF artifacts to the database directory. This should not affect any other consumers of the SARIF file as this occurs in the `init-post` step.
 2024-09-11 15:09:29 -07:00
Angela P Wen 715faf450a Merge pull request #2445 from github/mergeback/v3.26.5-to-main-2c779ab0 
Mergeback v3.26.5 refs/heads/releases/v3 into main
 2024-08-23 15:31:22 -07:00
Angela P WenHenry Mercergithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 		2c779ab0d0 Merge main into releases/v3 (#2444) 
* Update changelog and version after v3.26.4

* Update checked-in dependencies

* Only run check SIP enablement once in `init` step (#2441)

Co-authored-by: Henry Mercer <henrymercer@github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Update changelog for v3.26.5

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Angela P Wen <angelapwen@github.com>
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2024-08-23 15:01:53 -07:00
Angela P WenHenry Mercergithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 		7e27807413 Only run check SIP enablement once in init step (#2441) 
Co-authored-by: Henry Mercer <henrymercer@github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2024-08-23 09:17:22 -07:00
Angela P Wen fd5fa130e2 Merge pull request #2438 from github/mergeback/v3.26.4-to-main-f0f3afee 
Mergeback v3.26.4 refs/heads/releases/v3 into main
 2024-08-21 13:13:31 -07:00
Angela P WenAndrew EisenbergMarco Gariogithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>Henry MercerArthur BaarsRemco VermeulenRemco Vermeulen
 		f0f3afee80 Merge main into releases/v3 (#2437) 
* Consider registries_credentials as input

* Clean-up logging

* More debugging of credentials

* Support URL

* Validate credentials input

* fixes

* Try upload teh proxy logs

* Update changelog and version after v3.26.3

* Update checked-in dependencies

* Stop checking disk usage for MacOS ARM with SIP disabled (#2434)

* Stop checking disk usage for MacOS ARM with SIP disabled

On MacOS ARM machines where SIP is disabled, after the build tracer is initialized in the `init` Action, we receive warnings when we run send status reports due to the `df` binary. This change will make it so that we no longer run `df` for those machines.

* Add deprecation message to `add-snippets` input.

* Update changelog with deprecation.

* Add link to PR deprecating `add-snippets` to CHANGELOG.md

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>

* Address incorrect changelog location

* Update changelog for v3.26.4

---------

Co-authored-by: Marco Gario <marcogario@github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Henry Mercer <henry@henrymercer.name>
Co-authored-by: Arthur Baars <aibaars@github.com>
Co-authored-by: Angela P Wen <angelapwen@github.com>
Co-authored-by: Remco Vermeulen <rvermeulen@github.com>
Co-authored-by: Remco Vermeulen <rvermeulen@users.noreply.github.com>
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
 2024-08-21 12:22:40 -07:00
Angela P Wen 202b3b97bf Stop checking disk usage for MacOS ARM with SIP disabled (#2434) 
* Stop checking disk usage for MacOS ARM with SIP disabled

On MacOS ARM machines where SIP is disabled, after the build tracer is initialized in the `init` Action, we receive warnings when we run send status reports due to the `df` binary. This change will make it so that we no longer run `df` for those machines.
 2024-08-20 16:04:03 -07:00
Angela P WenandAndrew Eisenberg 9c646c24a4 Add warning and update PR checks for Swift on Linux (#2399) 
* PR checks: Only run Swift build command on MacOS
* PR checks: update to only test Swift on MacOS
* Log warning if workflow is running Swift on Ubuntu
---------

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
 2024-08-02 16:27:45 +02:00
Angela P Wen f8e94f9775 Merge pull request #2389 from github/mergeback/v3.25.14-to-main-5cf07d8b 
Mergeback v3.25.14 refs/heads/releases/v3 into main
 2024-07-25 11:18:04 +02:00
Angela P Wen 5cf07d8b70 Merge pull request #2388 from github/update-v3.25.14-1b214db07 
Merge main into releases/v3
 2024-07-25 10:28:49 +02:00
Angela P Wen b400d0f668 Merge pull request #2355 from github/angelapwen/make-log-links-clickable 
Make all instances of doc links in logs clickable
 2024-07-23 20:33:39 +02:00
Angela P Wen 892ff9ec25 Fix linting errors 2024-07-23 15:21:21 +02:00