Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update README with detailed information #2415

Merged
merged 4 commits into from
Oct 4, 2024

Conversation

aeisenberg
Copy link
Contributor

@aeisenberg aeisenberg commented Aug 7, 2024

Update README.md to include detailed information about inputs, workflow permissions, build modes, and actions.

  • Inputs: Add a section on inputs, including the config option, languages, queries, packs, db-location, ram, threads, and source-root.
  • Workflow Permissions: Add a section on workflow permissions required for the actions.
  • Build Modes: Add a section explaining the different build modes available for the actions (none, autobuild, manual).
  • Actions: Add a section describing the different actions (init, autobuild, analyze, upload-sarif, resolve-environment, start-proxy) and how to use them, with links to the relevant documentation on GitHub.

For more details, open the Copilot Workspace session.

@aeisenberg aeisenberg requested a review from a team as a code owner August 7, 2024 21:20
@aeisenberg aeisenberg marked this pull request as draft August 7, 2024 21:21
@aeisenberg aeisenberg changed the title Update README with detailed information [WIP] Update README with detailed information Aug 7, 2024
@aeisenberg
Copy link
Contributor Author

Please ignore for now. I created this PR using a copilot workspace. There are a lot of things I need to clean up. I just wanted to try out using it.

@aeisenberg aeisenberg changed the title [WIP] Update README with detailed information Update README with detailed information Aug 9, 2024
@aeisenberg aeisenberg marked this pull request as ready for review August 9, 2024 20:30
@github github deleted a comment from FreeMason9224 Aug 19, 2024
@angelapwen
Copy link
Contributor

@aeisenberg just checking, is this PR ready for review by a human or not yet? 🤖

@aeisenberg
Copy link
Contributor Author

It needs some more work. I haven't had a chance to really look at it. I'm not sure when I'll get another chance, so if you want to pick it up, feel free to.

@angelapwen
Copy link
Contributor

Ah, was just wondering if you were blocked on review 😸

Update `README.md` to include detailed information about inputs, workflow permissions, build modes, and actions.

* **Inputs**: Add a section on inputs, including the `config` option, `languages`, `queries`, `packs`, `db-location`, `ram`, `threads`, and `source-root`.
* **Workflow Permissions**: Add a section on workflow permissions required for the actions.
* **Build Modes**: Add a section explaining the different build modes available for the actions (`none`, `autobuild`, `manual`).
* **Actions**: Add a section describing the different actions (`init`, `autobuild`, `analyze`, `upload-sarif`, `resolve-environment`, `start-proxy`) and how to use them, with links to the relevant documentation on GitHub.

---

For more details, open the [Copilot Workspace session](https://copilot-workspace.githubnext.com/github/codeql-action?shareId=XXXX-XXXX-XXXX-XXXX).
Restructured the change to the README. Instead of directly including the
descriptions of the language inputs, added links to the inputs for each
action.
@aeisenberg
Copy link
Contributor Author

@angelapwen This is now ready for review. Can you take a look when you have a chance?

Copy link
Contributor

@angelapwen angelapwen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a few questions!! Thanks!

README.md Outdated

Actions with special purposes and unlikely to be used directly:

- `autobuild`: (Deprecated) Attempts to automatically build the code. Only used for analyzing languages that require a build. Use the `build-mode: autobuild` input in the `init` action instead. For information about input parameters, see the [autobuild action definition](https://github.com/github/codeql-action/blob/main/autobuild/action.yml).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is autobuild officially deprecated? I might have missed that 🤔

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not deprecated yet. I should probably remove the tag, but it's a good discussion to have.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense 👍 I think we should also remove it from the description in the .yml file too then!

README.md Outdated
Comment on lines 35 to 36
- `resolve-environment`: Attempts to infer a build environment suitable for automatic builds. For information about input parameters, see the [resolve-environment action definition](https://github.com/github/codeql-action/blob/main/resolve-environment/action.yml).
- `start-proxy`: Starts an HTTP proxy server for downloading dependencies in private registries. For information about input parameters, see the [start-proxy action definition](https://github.com/github/codeql-action/blob/main/start-proxy/action.yml).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We might want to label these experimental (they're labeled that way in the definitions). Also, start-proxy is explicitly for internal GH use only — not sure if we want to advertise it in the README?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it's worth keeping start-proxy since the action exists and users can see it, but I will make sure it's clear that it's internal use only.

autobuild/action.yml Outdated Show resolved Hide resolved
Copy link

@FreeMason9224 FreeMason9224 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The recent changes in the pull request affect the following files:

  1. README.md

    • Added detailed descriptions for different actions related to CodeQL analysis.
    • Expanded sections for workflow permissions and build modes.
  2. autobuild/action.yml

    • Updated the description to include more details about the autobuild mode.

Next Steps

  1. Create a file to document your review comments.
  2. Commit your changes to a new branch.
  3. Create a pull request from the new branch.

@aeisenberg aeisenberg merged commit 46d955c into github:main Oct 4, 2024
271 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants