-
Notifications
You must be signed in to change notification settings - Fork 309
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
paths and paths-ignore config settings are invalid #283
Comments
That section is under using-a-custom-configuration-file so the options go in to a separate yml file instead of directly into the workflow. What you actually pass to the action is - uses: github/codeql-action/init@v1
with:
config-file: ./.github/codeql/codeql-config.yml I'm going to close this issue. Let me know if the above doesn't make sense. |
mbien
added a commit
to mbien/roller
that referenced
this issue
Aug 27, 2021
this requires unfortunately another config file since path settings can't be set in the workflow config. see github/codeql-action#283
mbien
added a commit
to apache/roller
that referenced
this issue
Sep 13, 2021
this requires unfortunately another config file since path settings can't be set in the workflow config. see github/codeql-action#283
#1590 may make this possible to pass directly in the workflow file rather than requiring a separate config file. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
On the docs for the security scanning, it mentions about using the keys
paths
andpaths-ignore
to restrict where the scan runs: https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#specifying-directories-to-scan.In the
github/codeql-action/init@v1
action, there doesn't appear to be any configuration options for them.Is this an issue with the docs or the action?
The text was updated successfully, but these errors were encountered: