Skip to content

Commits

Commits on Jun 4, 2021

  1. Copy the full SHA
    6cee818 View commit details

Commits on Jun 3, 2021

  1. Allow the codeql-action to run packages

    This commit adds a `packs` option to the codeql-config.yml file. Users
    can specify a list of ql packs to include in the analysis.
    
    For a single language analysis, the packs property looks like this:
    
    ```yaml
    packs:
      - pack-scope/pack-name1@1.2.3
      - pack-scope/pack-name2   # no explicit version means download the latest
    ```
    
    For multi-language analysis, you must key the packs block by lanaguage:
    
    ```yaml
    packs:
      cpp:
        - pack-scope/pack-name1@1.2.3
        - pack-scope/pack-name2
      java:
        - pack-scope/pack-name3@1.2.3
        - pack-scope/pack-name4
    ```
    
    This implementation adds a new analysis run (alongside custom and 
    builtin runs). The unit tests indicate that the correct commands are
    being run, but I have not actually tried this with a real CLI.
    
    Also, convert `instanceof Array` to `Array.isArray` since that is
    sightly better in some situations. See:
    https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray#instanceof_vs_isarray
    Andrew Eisenberg committed Jun 3, 2021
    Copy the full SHA
    86a804f View commit details

Commits on Jun 2, 2021

  1. Add environment variables to signal feature and version to the CLI

    This PR ensures environment variables are set before any invocation of
    the CLI.  Here is a list of vars that are set:
    
    https://github.com/github/codeql-coreql-team/issues/1124#issuecomment-852463521
    
    This ensures the CLI knows the features and versions of the containing
    actions/runner.
    
    Additionally:
    
    - Fix the user agent so that it more closely aligns with user agent
      spec
    - Refactor environment variable initialization so that it all happens in
      one place and call.
    - Move Mode, getRequiredEnvParam, setMode, getMode out of actions-util
      and into util. actions-util is meant for utils only called by the
      action, not the runner.
    
    The `prepareLocalRunEnvironment()` method is most likely deprecated and
    should be removed. I originally added it because I had a way of working
    where I would run the action from my local machine to test out changes,
    but this was always a little flaky. So, I no longer use this way of
    working. I will probably remove it soon.
    Andrew Eisenberg committed Jun 2, 2021
    Copy the full SHA
    3708898 View commit details

Commits on May 31, 2021

  1. Send the version and mode with the user agent

    This commit changes the way the action determines if running in action
    or runner mode. There is now an environment variable that is set at the
    beginning of the process and elsewhere in the process, we can check to
    see if the variable is set.
    Andrew Eisenberg committed May 31, 2021
    Copy the full SHA
    4758879 View commit details

Commits on May 24, 2021

  1. Address comments

    Arthur Baars committed May 24, 2021
    Copy the full SHA
    44c6b33 View commit details

Commits on May 23, 2021

  1. Check available languages

    Arthur Baars committed May 23, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    4f51b8c View commit details

Commits on May 21, 2021

  1. Use --additional-packs instead of --search-path

    Arthur Baars committed May 21, 2021
    Copy the full SHA
    69cc355 View commit details

Commits on May 20, 2021

  1. Decode CodeQL stdout as UTF-8

    Aditya Sharad committed May 20, 2021
    Copy the full SHA
    512d467 View commit details
  2. Analyze: Log the analysis summary in its own group

    Fix grouping of the analysis logs, so that custom query logs also get grouped.
    Capture the stdout of codeql database analyze, which contains the analysis summary
    from summary and diagnostic queries.
    Log this output in its own group, along with the baseline computed in the Action.
    Aditya Sharad committed May 20, 2021
    Copy the full SHA
    19fe63f View commit details

Commits on May 14, 2021

  1. Add warnings about CLI hack to codeql.ts

    These warnings refer to a hack that was added to the CLI in
    https://github.com/github/semmle-code/pull/39335
    
    They can be removed again once the CLI has a more principled way for
    the CLI to recognize that it's being invoked by the runner/action.
    Henning Makholm committed May 14, 2021
    Copy the full SHA
    e7d4215 View commit details

Commits on May 10, 2021

  1. Merge branch 'main' into daverlo/categoryInput

    David Verdeguer committed May 10, 2021
    Copy the full SHA
    ea18d47 View commit details

Commits on May 5, 2021

  1. Copy the full SHA
    2c0a857 View commit details

Commits on May 3, 2021

  1. Forward category input to codeql cli

    David Verdeguer committed May 3, 2021
    Copy the full SHA
    c93cbc9 View commit details

Commits on Apr 22, 2021

  1. Copy the full SHA
    8c91ba8 View commit details

Commits on Apr 21, 2021

  1. Add external git repositories to search path for custom queries

    Edoardo Pirovano authored and Edoardo Pirovano committed Apr 21, 2021
    Copy the full SHA
    578f9fc View commit details

Commits on Mar 16, 2021

  1. Copy the full SHA
    5004a54 View commit details
  2. Copy the full SHA
    d698cb3 View commit details
  3. make control flow cleaer to fix query alert

    Robert committed Mar 16, 2021
    Copy the full SHA
    09024e5 View commit details

Commits on Mar 7, 2021

  1. When downloading the CodeQL bundle, only use the GitHub AE endpoint o…

    …n GitHub AE, and check it first.
    Chris Gavin committed Mar 7, 2021
    Copy the full SHA
    bb51ece View commit details

Commits on Feb 15, 2021

  1. Copy the full SHA
    f8c5dac View commit details

Commits on Jan 26, 2021

  1. Fix deduplication of bundle download sources.

    Chris Gavin committed Jan 26, 2021
    Copy the full SHA
    d182a0e View commit details

Commits on Nov 30, 2020

  1. Use version information to construct payload

    Robin Neatherway committed Nov 30, 2020
    Copy the full SHA
    dff118f View commit details

Commits on Nov 26, 2020

  1. Request meta endpoint at the start of execution

    Robert committed Nov 26, 2020
    Copy the full SHA
    81a21bf View commit details

Commits on Nov 23, 2020

  1. Copy the full SHA
    20567b5 View commit details

Commits on Nov 20, 2020

  1. Merge branch 'main' into fix-typos

    Eric Cornelissen committed Nov 20, 2020
    Copy the full SHA
    6aaf048 View commit details
  2. Fix typos in src

    - Rename "toolrunnner" (three 'n') to "toolrunner"
    - Rename "relativeFilepaht" to "relativeFilepath"
    - Fix various typos in documentation & comments
    - Fix typos in logs and test names
    Eric Cornelissen committed Nov 20, 2020
    Copy the full SHA
    85ea24b View commit details

Commits on Nov 19, 2020

  1. Fix no shadow issues in codeql.ts

    Two simple variable renames from "path" to "paths" since the types are
    arrays of strings (not just one string).
    
    One function definition inside a function moved outside that function
    to avoid shadowing the "options" argument.
    Eric Cornelissen committed Nov 19, 2020
    Copy the full SHA
    98ad63b View commit details

Commits on Nov 18, 2020

  1. Copy the full SHA
    0d960df View commit details
  2. Merge main into add-multi-cause-markdown-flag.

    Chris Gavin committed Nov 18, 2020
    Copy the full SHA
    f94e06a View commit details

Commits on Nov 12, 2020

  1. check if running locally

    Robert committed Nov 12, 2020
    Copy the full SHA
    1737b80 View commit details
  2. Copy the full SHA
    80b43ca View commit details

Commits on Nov 10, 2020

  1. Make use of the GITHUB_ACTION_REPOSITORY environment variable if it…

    … is set.
    Chris Gavin committed Nov 10, 2020
    Copy the full SHA
    bf30ea6 View commit details

Commits on Nov 3, 2020

  1. Add the --threads config option to finalize db (#281)

    This flag is already being used for `runQueries`, so let's use it for
    finalize as well.
    Andrew Eisenberg authored and GitHub committed Nov 3, 2020
    Copy the full SHA
    bc1ee16 View commit details
  2. Copy the full SHA
    b16110e View commit details

Commits on Nov 2, 2020

  1. Merge main into check-api-version.

    Chris Gavin committed Nov 2, 2020
    Copy the full SHA
    5e2fa08 View commit details
Older