-
Notifications
You must be signed in to change notification settings - Fork 329
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow the codeql-action to run packages #545
Commits on Jun 3, 2021
-
Allow the codeql-action to run packages
This commit adds a `packs` option to the codeql-config.yml file. Users can specify a list of ql packs to include in the analysis. For a single language analysis, the packs property looks like this: ```yaml packs: - pack-scope/pack-name1@1.2.3 - pack-scope/pack-name2 # no explicit version means download the latest ``` For multi-language analysis, you must key the packs block by lanaguage: ```yaml packs: cpp: - pack-scope/pack-name1@1.2.3 - pack-scope/pack-name2 java: - pack-scope/pack-name3@1.2.3 - pack-scope/pack-name4 ``` This implementation adds a new analysis run (alongside custom and builtin runs). The unit tests indicate that the correct commands are being run, but I have not actually tried this with a real CLI. Also, convert `instanceof Array` to `Array.isArray` since that is sightly better in some situations. See: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray#instanceof_vs_isarray
Configuration menu - View commit details
-
Copy full SHA for 86a804f - Browse repository at this point
Copy the full SHA 86a804fView commit details
Commits on Jun 4, 2021
-
Configuration menu - View commit details
-
Copy full SHA for 6cee818 - Browse repository at this point
Copy the full SHA 6cee818View commit details -
Fix logic for calculating if there are queries to run
During the analyze phase.
Configuration menu - View commit details
-
Copy full SHA for 9b5753a - Browse repository at this point
Copy the full SHA 9b5753aView commit details -
Use strings instead. They are easier to serialize and deserialize.
Configuration menu - View commit details
-
Copy full SHA for 06687e9 - Browse repository at this point
Copy the full SHA 06687e9View commit details
Commits on Jun 6, 2021
-
Configuration menu - View commit details
-
Copy full SHA for d87945e - Browse repository at this point
Copy the full SHA d87945eView commit details
Commits on Jun 8, 2021
-
Packaging: Address review comments
1. Better malformed data guard for PackDownloadOutput 2. Fix Packs type 3. Remove TODO in init-action
Configuration menu - View commit details
-
Copy full SHA for 1cc5f1d - Browse repository at this point
Copy the full SHA 1cc5f1dView commit details -
Add an integration test for packaging
Uses two pre-existing packages to run some simple queries on a javascript database.
Configuration menu - View commit details
-
Copy full SHA for d42f654 - Browse repository at this point
Copy the full SHA d42f654View commit details
Commits on Jun 9, 2021
-
Configuration menu - View commit details
-
Copy full SHA for 82388fd - Browse repository at this point
Copy the full SHA 82388fdView commit details -
Configuration menu - View commit details
-
Copy full SHA for db01c78 - Browse repository at this point
Copy the full SHA db01c78View commit details -
Extract a `runTool` function that captures the stdout and returns it. A small refactoring that reduces copied code.
Configuration menu - View commit details
-
Copy full SHA for 49b2220 - Browse repository at this point
Copy the full SHA 49b2220View commit details -
Use nullish conversion for packs
Slightly simplifies the `parsePacks` function.
Configuration menu - View commit details
-
Copy full SHA for 96e7de3 - Browse repository at this point
Copy the full SHA 96e7de3View commit details -
Add pack download to its own log group
Also, make the baseline count message less awkward sounding.
Configuration menu - View commit details
-
Copy full SHA for a2e96a4 - Browse repository at this point
Copy the full SHA a2e96a4View commit details -
Cleans up the output logs even more. These entries don't add any more information since everything is grouped now.
Configuration menu - View commit details
-
Copy full SHA for 23cdd6b - Browse repository at this point
Copy the full SHA 23cdd6bView commit details -
Avoid running mergeback workflow on PR
This was causing the workflow to run and create tags after merging main into a branch.
Configuration menu - View commit details
-
Copy full SHA for 6a1c070 - Browse repository at this point
Copy the full SHA 6a1c070View commit details
Commits on Jun 10, 2021
-
Configuration menu - View commit details
-
Copy full SHA for 20aafcd - Browse repository at this point
Copy the full SHA 20aafcdView commit details