Commits
Commits on Jun 4, 2021
-
Add better comments and error messages for pack-related changes
Andrew Eisenberg committedJun 4, 2021 Copy the full SHA 6cee818View commit details
Commits on Jun 3, 2021
-
Allow the codeql-action to run packages
This commit adds a `packs` option to the codeql-config.yml file. Users can specify a list of ql packs to include in the analysis. For a single language analysis, the packs property looks like this: ```yaml packs: - pack-scope/pack-name1@1.2.3 - pack-scope/pack-name2 # no explicit version means download the latest ``` For multi-language analysis, you must key the packs block by lanaguage: ```yaml packs: cpp: - pack-scope/pack-name1@1.2.3 - pack-scope/pack-name2 java: - pack-scope/pack-name3@1.2.3 - pack-scope/pack-name4 ``` This implementation adds a new analysis run (alongside custom and builtin runs). The unit tests indicate that the correct commands are being run, but I have not actually tried this with a real CLI. Also, convert `instanceof Array` to `Array.isArray` since that is sightly better in some situations. See: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray#instanceof_vs_isarray
Andrew Eisenberg committedJun 3, 2021 Copy the full SHA 86a804fView commit details
Commits on Jun 2, 2021
-
Add environment variables to signal feature and version to the CLI
This PR ensures environment variables are set before any invocation of the CLI. Here is a list of vars that are set: https://github.com/github/codeql-coreql-team/issues/1124#issuecomment-852463521 This ensures the CLI knows the features and versions of the containing actions/runner. Additionally: - Fix the user agent so that it more closely aligns with user agent spec - Refactor environment variable initialization so that it all happens in one place and call. - Move Mode, getRequiredEnvParam, setMode, getMode out of actions-util and into util. actions-util is meant for utils only called by the action, not the runner. The `prepareLocalRunEnvironment()` method is most likely deprecated and should be removed. I originally added it because I had a way of working where I would run the action from my local machine to test out changes, but this was always a little flaky. So, I no longer use this way of working. I will probably remove it soon.
Andrew Eisenberg committedJun 2, 2021 Copy the full SHA 3708898View commit details
Commits on May 31, 2021
-
Send the version and mode with the user agent
This commit changes the way the action determines if running in action or runner mode. There is now an environment variable that is set at the beginning of the process and elsewhere in the process, we can check to see if the variable is set.
Andrew Eisenberg committedMay 31, 2021 Copy the full SHA 4758879View commit details
Commits on May 24, 2021
-
Arthur Baars committed
May 24, 2021 Copy the full SHA 44c6b33View commit details
Commits on May 23, 2021
-
Arthur Baars committed
May 23, 2021 Unverified
No user is associated with the committer email.Copy the full SHA 4f51b8cView commit details
Commits on May 21, 2021
-
Use --additional-packs instead of --search-path
Arthur Baars committedMay 21, 2021 Copy the full SHA 69cc355View commit details
Commits on May 20, 2021
-
Aditya Sharad committed
May 20, 2021 Copy the full SHA 512d467View commit details -
Analyze: Log the analysis summary in its own group
Fix grouping of the analysis logs, so that custom query logs also get grouped. Capture the stdout of codeql database analyze, which contains the analysis summary from summary and diagnostic queries. Log this output in its own group, along with the baseline computed in the Action.
Aditya Sharad committedMay 20, 2021 Copy the full SHA 19fe63fView commit details
Commits on May 14, 2021
-
Add warnings about CLI hack to codeql.ts
These warnings refer to a hack that was added to the CLI in https://github.com/github/semmle-code/pull/39335 They can be removed again once the CLI has a more principled way for the CLI to recognize that it's being invoked by the runner/action.
Henning Makholm committedMay 14, 2021 Copy the full SHA e7d4215View commit details
Commits on May 10, 2021
-
Merge branch 'main' into daverlo/categoryInput
David Verdeguer committedMay 10, 2021 Copy the full SHA ea18d47View commit details
Commits on May 5, 2021
-
Log each query as it's interpreted when calling codeql database analyze
Henry Mercer committedMay 5, 2021 Copy the full SHA 2c0a857View commit details
Commits on May 3, 2021
-
Forward category input to codeql cli
David Verdeguer committedMay 3, 2021 Copy the full SHA c93cbc9View commit details
Commits on Apr 22, 2021
-
Introduce our own toolcache implementation for use by the runnner
Robert committedApr 22, 2021 Copy the full SHA 8c91ba8View commit details
Commits on Apr 21, 2021
-
Add external git repositories to search path for custom queries
Edoardo Pirovano authored and Edoardo Pirovano committedApr 21, 2021 Copy the full SHA 578f9fcView commit details
Commits on Mar 16, 2021
-
Merge branch 'main' into robertbrignull/toolcache-query-safety
Robert committedMar 16, 2021 Copy the full SHA 5004a54View commit details -
Make unguarded-action-lib better at ignoring uses of toolcache
Robert committedMar 16, 2021 Copy the full SHA d698cb3View commit details -
make control flow cleaer to fix query alert
Robert committedMar 16, 2021 Copy the full SHA 09024e5View commit details
Commits on Mar 7, 2021
-
When downloading the CodeQL bundle, only use the GitHub AE endpoint o…
…n GitHub AE, and check it first.
Chris Gavin committedMar 7, 2021 Copy the full SHA bb51eceView commit details
Commits on Feb 15, 2021
-
Also look for the CodeQL bundle at the custom GitHub AE endpoint.
Chris Gavin committedFeb 15, 2021 Copy the full SHA f8c5dacView commit details
Commits on Jan 26, 2021
-
Fix deduplication of bundle download sources.
Chris Gavin committedJan 26, 2021 Copy the full SHA d182a0eView commit details
Commits on Nov 30, 2020
-
Use version information to construct payload
Robin Neatherway committedNov 30, 2020 Copy the full SHA dff118fView commit details
Commits on Nov 26, 2020
-
Request meta endpoint at the start of execution
Robert committedNov 26, 2020 Copy the full SHA 81a21bfView commit details
Commits on Nov 23, 2020
-
Introduce parameter object for API params that travel together
Sam Partington committedNov 23, 2020 Copy the full SHA 20567b5View commit details
Commits on Nov 20, 2020
-
Merge branch 'main' into fix-typos
Eric Cornelissen committedNov 20, 2020 Copy the full SHA 6aaf048View commit details -
- Rename "toolrunnner" (three 'n') to "toolrunner" - Rename "relativeFilepaht" to "relativeFilepath" - Fix various typos in documentation & comments - Fix typos in logs and test names
Eric Cornelissen committedNov 20, 2020 Copy the full SHA 85ea24bView commit details
Commits on Nov 19, 2020
-
Fix no shadow issues in codeql.ts
Two simple variable renames from "path" to "paths" since the types are arrays of strings (not just one string). One function definition inside a function moved outside that function to avoid shadowing the "options" argument.
Eric Cornelissen committedNov 19, 2020 Copy the full SHA 98ad63bView commit details
Commits on Nov 18, 2020
-
Merge branch 'main' into robertbrignull/tools_version
Robert committedNov 18, 2020 Copy the full SHA 0d960dfView commit details -
Merge main into add-multi-cause-markdown-flag.
Chris Gavin committedNov 18, 2020 Copy the full SHA f94e06aView commit details
Commits on Nov 12, 2020
-
Robert committed
Nov 12, 2020 Copy the full SHA 1737b80View commit details -
send action ref and tool version in status reports
Robert committedNov 12, 2020 Copy the full SHA 80b43caView commit details
Commits on Nov 10, 2020
-
Make use of the
GITHUB_ACTION_REPOSITORY
environment variable if it…… is set.
Chris Gavin committedNov 10, 2020 Copy the full SHA bf30ea6View commit details
Commits on Nov 3, 2020
-
Add the --threads config option to finalize db (#281)
This flag is already being used for `runQueries`, so let's use it for finalize as well.
Andrew Eisenberg authored and GitHub committedNov 3, 2020 Copy the full SHA bc1ee16View commit details -
Log the version warning a second time if a request fails unexpectedly.
Chris Gavin committedNov 3, 2020 Copy the full SHA b16110eView commit details
Commits on Nov 2, 2020
-
Merge main into check-api-version.
Chris Gavin committedNov 2, 2020 Copy the full SHA 5e2fa08View commit details