Skip to content

Commits

History for codeql-action/lib/config-utils.js

Commits on Jun 8, 2021

  1. Packaging: Address review comments 

    1. Better malformed data guard for PackDownloadOutput
2. Fix Packs type
3. Remove TODO in init-action
    Andrew Eisenberg committed Jun 8, 2021
    Copy the full SHA
    1cc5f1d View commit details

Commits on Jun 4, 2021

  1. Avoid using SemVer instances 

    Use strings instead. They are easier to serialize and deserialize.
    Andrew Eisenberg committed Jun 4, 2021
    Copy the full SHA
    06687e9 View commit details

  2. Fix logic for calculating if there are queries to run 

    During the analyze phase.
    Andrew Eisenberg committed Jun 4, 2021
    Copy the full SHA
    9b5753a View commit details

  3. Add better comments and error messages for pack-related changes

    Andrew Eisenberg committed Jun 4, 2021
    Copy the full SHA
    6cee818 View commit details

Commits on Jun 3, 2021

  1. Allow the codeql-action to run packages 

    This commit adds a `packs` option to the codeql-config.yml file. Users
can specify a list of ql packs to include in the analysis.

For a single language analysis, the packs property looks like this:

```yaml
packs:
  - pack-scope/pack-name1@1.2.3
  - pack-scope/pack-name2   # no explicit version means download the latest
```

For multi-language analysis, you must key the packs block by lanaguage:

```yaml
packs:
  cpp:
    - pack-scope/pack-name1@1.2.3
    - pack-scope/pack-name2
  java:
    - pack-scope/pack-name3@1.2.3
    - pack-scope/pack-name4
```

This implementation adds a new analysis run (alongside custom and 
builtin runs). The unit tests indicate that the correct commands are
being run, but I have not actually tried this with a real CLI.

Also, convert `instanceof Array` to `Array.isArray` since that is
sightly better in some situations. See:
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray#instanceof_vs_isarray
    Andrew Eisenberg committed Jun 3, 2021
    Copy the full SHA
    86a804f View commit details

Commits on Jun 2, 2021

  1. Remove local environment running 

    This is a functionality that never worked perfectly and hasn't been
used for a while.

This allows developers to run the action on their local machine, but
the run was always flaky and never 100% mirrored what was happening on
the actions runner.
    Andrew Eisenberg committed Jun 2, 2021
    Copy the full SHA
    2c2ebdc View commit details

Commits on May 23, 2021

  1. Check available languages

    Arthur Baars committed May 23, 2021
    Copy the full SHA
    4f51b8c View commit details

Commits on May 21, 2021

  1. Check queries in initConfig

    Arthur Baars committed May 21, 2021
    Copy the full SHA
    84bec4d View commit details

  2. Remove superfluous if

    Arthur Baars committed May 21, 2021
    Copy the full SHA
    9aca271 View commit details

  3. Ensure queries[language] objects are initialized

    Arthur Baars committed May 21, 2021
    Copy the full SHA
    ec011dd View commit details

Commits on May 17, 2021

  1. Add configuration option to set CodeQL DB location

    Edoardo Pirovano authored and Edoardo Pirovano committed May 17, 2021
    Copy the full SHA
    79c79f1 View commit details

Commits on Apr 21, 2021

  1. Add external git repositories to search path for custom queries

    Edoardo Pirovano authored and Edoardo Pirovano committed Apr 21, 2021
    Copy the full SHA
    578f9fc View commit details

Commits on Apr 9, 2021

  1. Use externalRepoAuth when getting a remote config 

    This allows users to specify a different token for retrieving the
codeql config from a different repository.

Fixes https://github.com/github/advanced-security-field/issues/185
    Andrew Eisenberg authored and Andrew Eisenberg committed Apr 9, 2021
    Copy the full SHA
    534192f View commit details

Commits on Jan 12, 2021

  1. Introduce external repository token

    Robert committed Jan 12, 2021
    Copy the full SHA
    90d1a31 View commit details

Commits on Nov 30, 2020

  1. Use version information to construct payload

    Robin Neatherway committed Nov 30, 2020
    Copy the full SHA
    dff118f View commit details

Commits on Nov 26, 2020

  1. Request meta endpoint at the start of execution

    Robert committed Nov 26, 2020
    Copy the full SHA
    81a21bf View commit details

Commits on Nov 23, 2020

  1. Introduce parameter object for API params that travel together

    Sam Partington committed Nov 23, 2020
    Copy the full SHA
    20567b5 View commit details

Commits on Nov 20, 2020

  1. Merge branch 'main' into fix-typos

    Eric Cornelissen committed Nov 20, 2020
    Copy the full SHA
    6aaf048 View commit details

  2. Run npm run build

    Eric Cornelissen committed Nov 20, 2020
    Copy the full SHA
    5416d4f View commit details

Commits on Nov 19, 2020

  1. Run npm run build

    Eric Cornelissen committed Nov 19, 2020
    Copy the full SHA
    847f4ef View commit details

Commits on Nov 2, 2020

  1. Pass a logger in to getApiClient() rather than constructing one there.

    Chris Gavin committed Nov 2, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    865b4bd View commit details

Commits on Oct 30, 2020

  1. Log a warning if the API version is not supported.

    Chris Gavin committed Oct 30, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    1220ae5 View commit details

Commits on Oct 1, 2020

  1. Switching to import/order instead of sort-imports

    Chris Raynor committed Oct 1, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    122c9b7 View commit details

Commits on Sep 29, 2020

  1. Resolve violations of sort-imports lint 

    Resolves #206
    Chris Raynor committed Sep 29, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    228546a View commit details

Commits on Sep 28, 2020

  1. Resolve violations of no-useless-escape lint 

    Resolves #205
    Michael Huynh committed Sep 28, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    c68c97e View commit details

Commits on Sep 21, 2020

  1. Merge main into update-actions-github.

    Chris Gavin committed Sep 21, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    bba73b6 View commit details

Commits on Sep 20, 2020

  1. Resolve violations of github/array-foreach lint 

    Resolves #199
    Michael Huynh committed Sep 20, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    4666a0e View commit details

Commits on Sep 18, 2020

  1. Update to the latest version of @actions/github.

    Chris Gavin committed Sep 18, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    9ed519f View commit details

  2. Merge branch 'main' into split_builtin_custom_queries

    Robert Brignull committed Sep 18, 2020
    Copy the full SHA
    1dc1029 View commit details

Commits on Sep 14, 2020

  1. Running lint-fix

    Chris Raynor committed Sep 14, 2020

    Unverified

    No user is associated with the committer email.
    Learn about vigilant mode
    Copy the full SHA
    a184d50 View commit details

Commits on Sep 10, 2020

  1. split up builtin and custom queries

    Robert Brignull committed Sep 10, 2020
    Copy the full SHA
    0539269 View commit details

Commits on Sep 8, 2020

  1. Merge branch 'main' into allow-additive-queries-in-workflow

    Sam Partington committed Sep 8, 2020
    Copy the full SHA
    d677f16 View commit details

Commits on Sep 1, 2020

  1. Add logger to checkoutExternalRepository

    Robert Brignull committed Sep 1, 2020
    Copy the full SHA
    8a821a9 View commit details

Commits on Aug 28, 2020

  1. Allow "additive" queries in workflow by prefixing with "+" 

    See discussion on https://github.com/github/code-scanning/issues/1446
    Sam Partington committed Aug 28, 2020
    Copy the full SHA
    82000c2 View commit details

  2. improve error message when config is not found

    Robert Brignull committed Aug 28, 2020
    Copy the full SHA
    80e2c4f View commit details
Older