packaging-codescanning-config-inputs-js.yml

name: "Packaging: Config and input passed to the CLI"
description: "Checks that specifying packages using a combination of a config file and input to the Action works"
versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs

env:
  CODEQL_PASS_CONFIG_TO_CLI: true

steps:
  - uses: ./../action/init
    with:
      config-file: ".github/codeql/codeql-config-packaging3.yml"
      packs: +codeql-testing/codeql-pack1@1.0.0
      languages: javascript
      tools: ${{ steps.prepare-test.outputs.tools-url }}
  - name: Build code
    shell: bash
    run: ./build.sh
  - uses: ./../action/analyze
    with:
      output: "${{ runner.temp }}/results"
      upload-database: false

  - name: Check results
    uses: ./../action/.github/actions/check-sarif
    with:
      sarif-file: ${{ runner.temp }}/results/javascript.sarif
      queries-run: javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block
      queries-not-run: foo,bar

  - name: Assert Results
    shell: bash
    run: |
      cd "$RUNNER_TEMP/results"
      # We should have 4 hits from these rules
      EXPECTED_RULES="javascript/example/empty-or-one-block javascript/example/empty-or-one-block javascript/example/other-query-block javascript/example/two-block"

      # use tr to replace newlines with spaces and xargs to trim leading and trailing whitespace
      RULES="$(cat javascript.sarif | jq -r '.runs[0].results[].ruleId' | sort | tr "\n\r" " " | xargs)"
      echo "Found matching rules '$RULES'"
      if [ "$RULES" != "$EXPECTED_RULES" ]; then
        echo "Did not match expected rules '$EXPECTED_RULES'."
        exit 1
      fi