Skip to content

Commits

Commits on Aug 18, 2021

  1. Enforce a minimum version of CodeQL CLI

    Edoardo Pirovano committed Aug 18, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    70d2efc View commit details
  2. Version flag usage of certain CLI flags

    Edoardo Pirovano committed Aug 18, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    fb77829 View commit details
  3. Cache result of codeql version

    Edoardo Pirovano committed Aug 18, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    4ba53e3 View commit details

Commits on Aug 12, 2021

  1. Pass --ram flag to database finalize

    Edoardo Pirovano committed Aug 12, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    0c4306b View commit details

Commits on Aug 2, 2021

  1. Copy the full SHA
    4f7bdf9 View commit details

Commits on Jul 27, 2021

  1. Rebuild after TypeScript version bump

    Edoardo Pirovano committed Jul 27, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    d9849b8 View commit details

Commits on Jun 28, 2021

  1. Address PR comment.

    Edoardo Pirovano committed Jun 28, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    a7dac5c View commit details
  2. Allow local instead of downloaded CodeQL

    Edoardo Pirovano committed Jun 28, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    8f4c2c7 View commit details

Commits on Jun 25, 2021

  1. Remove misleading comment.

    Edoardo Pirovano authored and Edoardo Pirovano committed Jun 25, 2021
    Copy the full SHA
    85ac9fe View commit details

Commits on Jun 24, 2021

  1. Improve error messages from CLI invocations

    Edoardo Pirovano authored and Edoardo Pirovano committed Jun 24, 2021
    Copy the full SHA
    40852fa View commit details
  2. Restore original getCodeQLActionRepository behaviour

    Simon Engledew committed Jun 24, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    9200db3 View commit details

Commits on Jun 23, 2021

  1. Replace custom tool download method with the one in the tool cache li…

    …brary.
    Chris Gavin committed Jun 23, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    59560e5 View commit details

Commits on Jun 22, 2021

  1. Upload CodeQL databases

    Robert committed Jun 22, 2021
    Copy the full SHA
    146c897 View commit details

Commits on Jun 21, 2021

  1. Revert "Upload CodeQL databases"

    Robert authored and GitHub committed Jun 21, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    d893508 View commit details

Commits on Jun 18, 2021

  1. Merge branch 'main' into upload-database

    Robert committed Jun 18, 2021
    Copy the full SHA
    33ac512 View commit details

Commits on Jun 10, 2021

  1. Update cleanup to bundle

    Robin Neatherway committed Jun 10, 2021
    Copy the full SHA
    4294711 View commit details
  2. Upload databases from analyze action

    Robert committed Jun 10, 2021
    Copy the full SHA
    2a9a602 View commit details

Commits on Jun 9, 2021

  1. Refactor codeql.ts

    Extract a `runTool` function that captures the stdout and returns it.
    A small refactoring that reduces copied code.
    Andrew Eisenberg committed Jun 9, 2021
    Copy the full SHA
    49b2220 View commit details
  2. Copy the full SHA
    82388fd View commit details
  3. Add --finalize-dataset to database finalize call

    Edoardo Pirovano authored and Edoardo Pirovano committed Jun 9, 2021
    Copy the full SHA
    babcc1b View commit details

Commits on Jun 8, 2021

  1. Add an integration test for packaging

    Uses two pre-existing packages to run some simple queries on a javascript
    database.
    Andrew Eisenberg committed Jun 8, 2021
    Copy the full SHA
    d42f654 View commit details
  2. Packaging: Address review comments

    1. Better malformed data guard for PackDownloadOutput
    2. Fix Packs type
    3. Remove TODO in init-action
    Andrew Eisenberg committed Jun 8, 2021
    Copy the full SHA
    1cc5f1d View commit details
  3. Replace analyze with run-queries and interpret-results

    Edoardo Pirovano authored and Edoardo Pirovano committed Jun 8, 2021
    Copy the full SHA
    2cc885d View commit details

Commits on Jun 6, 2021

  1. Run the pack download command

    Andrew Eisenberg committed Jun 6, 2021
    Copy the full SHA
    d87945e View commit details
  2. Add --sarif-group-rules-by-pack flag

    Edoardo Pirovano authored and Edoardo Pirovano committed Jun 6, 2021
    Copy the full SHA
    1644ade View commit details

Commits on Jun 4, 2021

  1. Cleanup CodeQL DBs and output their location for later steps

    Edoardo Pirovano authored and Edoardo Pirovano committed Jun 4, 2021
    Copy the full SHA
    ddb83a4 View commit details
  2. Copy the full SHA
    6cee818 View commit details

Commits on Jun 3, 2021

  1. Allow the codeql-action to run packages

    This commit adds a `packs` option to the codeql-config.yml file. Users
    can specify a list of ql packs to include in the analysis.
    
    For a single language analysis, the packs property looks like this:
    
    ```yaml
    packs:
      - pack-scope/pack-name1@1.2.3
      - pack-scope/pack-name2   # no explicit version means download the latest
    ```
    
    For multi-language analysis, you must key the packs block by lanaguage:
    
    ```yaml
    packs:
      cpp:
        - pack-scope/pack-name1@1.2.3
        - pack-scope/pack-name2
      java:
        - pack-scope/pack-name3@1.2.3
        - pack-scope/pack-name4
    ```
    
    This implementation adds a new analysis run (alongside custom and 
    builtin runs). The unit tests indicate that the correct commands are
    being run, but I have not actually tried this with a real CLI.
    
    Also, convert `instanceof Array` to `Array.isArray` since that is
    sightly better in some situations. See:
    https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray#instanceof_vs_isarray
    Andrew Eisenberg committed Jun 3, 2021
    Copy the full SHA
    86a804f View commit details

Commits on Jun 2, 2021

  1. Add environment variables to signal feature and version to the CLI

    This PR ensures environment variables are set before any invocation of
    the CLI.  Here is a list of vars that are set:
    
    https://github.com/github/codeql-coreql-team/issues/1124#issuecomment-852463521
    
    This ensures the CLI knows the features and versions of the containing
    actions/runner.
    
    Additionally:
    
    - Fix the user agent so that it more closely aligns with user agent
      spec
    - Refactor environment variable initialization so that it all happens in
      one place and call.
    - Move Mode, getRequiredEnvParam, setMode, getMode out of actions-util
      and into util. actions-util is meant for utils only called by the
      action, not the runner.
    
    The `prepareLocalRunEnvironment()` method is most likely deprecated and
    should be removed. I originally added it because I had a way of working
    where I would run the action from my local machine to test out changes,
    but this was always a little flaky. So, I no longer use this way of
    working. I will probably remove it soon.
    Andrew Eisenberg committed Jun 2, 2021
    Copy the full SHA
    3708898 View commit details

Commits on May 31, 2021

  1. Send the version and mode with the user agent

    This commit changes the way the action determines if running in action
    or runner mode. There is now an environment variable that is set at the
    beginning of the process and elsewhere in the process, we can check to
    see if the variable is set.
    Andrew Eisenberg committed May 31, 2021
    Copy the full SHA
    4758879 View commit details

Commits on May 24, 2021

  1. Address comments

    Arthur Baars committed May 24, 2021
    Copy the full SHA
    44c6b33 View commit details

Commits on May 23, 2021

  1. Check available languages

    Arthur Baars committed May 23, 2021
    Copy the full SHA
    4f51b8c View commit details

Commits on May 21, 2021

  1. Use --additional-packs instead of --search-path

    Arthur Baars committed May 21, 2021
    Copy the full SHA
    69cc355 View commit details

Commits on May 20, 2021

  1. Decode CodeQL stdout as UTF-8

    Aditya Sharad committed May 20, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    512d467 View commit details
  2. Analyze: Log the analysis summary in its own group

    Fix grouping of the analysis logs, so that custom query logs also get grouped.
    Capture the stdout of codeql database analyze, which contains the analysis summary
    from summary and diagnostic queries.
    Log this output in its own group, along with the baseline computed in the Action.
    Aditya Sharad committed May 20, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    19fe63f View commit details
Older