Skip to content

Commits

Commits on May 17, 2021

  1. Add configuration option to set CodeQL DB location

    Edoardo Pirovano authored and Edoardo Pirovano committed May 17, 2021
    Copy the full SHA
    79c79f1 View commit details
  2. Update CodeQL bundle to 20210517 / 2.5.5

    Henning Makholm committed May 17, 2021
    Copy the full SHA
    95f5a25 View commit details

Commits on May 14, 2021

  1. Add warnings about CLI hack to codeql.ts

    These warnings refer to a hack that was added to the CLI in
    https://github.com/github/semmle-code/pull/39335
    
    They can be removed again once the CLI has a more principled way for
    the CLI to recognize that it's being invoked by the runner/action.
    Henning Makholm committed May 14, 2021
    Copy the full SHA
    e7d4215 View commit details

Commits on May 13, 2021

  1. Change include path for lines of code counting

    Previously, we were always using `**` in the include path. the
    effect of this was to always count lines in the entire
    repository unless explicitly added to the paths-ignore. This
    was incorrect behaviour. Now we only using `**` if the include
    path is otherwise empty.
    Andrew Eisenberg committed May 13, 2021
    Copy the full SHA
    8e61fc2 View commit details
  2. Use the prefix id for keying into metrics rules

    Fixes a bug where we were looking for incorrect keys for metrics rules.
    Previously, we were using full language names in the keys. Now, we use
    the short language names in the metric ids. This is done through a
    simplification of the code.
    
    Also, this change does two smaller things:
    
    1. Prints out the baseline count to the logs
    2. Adds the `assertNever` function to ensure we never miss a case in
       a switch statement. This function is borrowed from vscode-codeql.
    Andrew Eisenberg committed May 13, 2021
    Copy the full SHA
    e8b2a98 View commit details

Commits on May 10, 2021

  1. Output environment file for Windows

    Edoardo Pirovano committed May 10, 2021
    Copy the full SHA
    a5506d8 View commit details
  2. Merge branch 'main' into daverlo/categoryInput

    David Verdeguer committed May 10, 2021
    Copy the full SHA
    ea18d47 View commit details

Commits on May 7, 2021

  1. Fix lines of code mapping

    We were inadvertently using codeql language ids instead of the action's
    language ids. There is now a 3-way mapping between the ids used by
    the lines counter library, the action, and codeql.
    Andrew Eisenberg committed May 7, 2021
    Copy the full SHA
    b6ae33f View commit details

Commits on May 6, 2021

  1. Merge branch 'main' into hmakholm/pr/fix-escaping

    Henning Makholm authored and GitHub committed May 6, 2021
    Copy the full SHA
    ad98dc6 View commit details
  2. fix typos in logging

    Robert committed May 6, 2021
    Copy the full SHA
    031dc50 View commit details
  3. Merge branch 'main' into hmakholm/pr/fix-escaping

    Henning Makholm authored and GitHub committed May 6, 2021
    Copy the full SHA
    ee062d3 View commit details

Commits on May 5, 2021

  1. Avoid fingerprinting directories

    Andrew Eisenberg committed May 5, 2021
    Copy the full SHA
    f584f94 View commit details
  2. Merge branch 'main' into hmakholm/pr/fix-escaping

    Andrew Eisenberg authored and GitHub committed May 5, 2021
    Copy the full SHA
    b477190 View commit details
  3. Update src/runner.ts

    Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
    Henning Makholm and Andrew Eisenberg committed May 5, 2021
    Copy the full SHA
    a6ebb19 View commit details
  4. fix value escaping in codeql-env.sh

    Henning Makholm committed May 5, 2021
    Copy the full SHA
    e7e64d5 View commit details
  5. Merge branch 'main' into aeisenberg/warning-message

    Henry Mercer authored and GitHub committed May 5, 2021
    Copy the full SHA
    c2ec5a2 View commit details
  6. Copy the full SHA
    2c0a857 View commit details
  7. Clarify the missing baseline lines of code warning message

    Andrew Eisenberg committed May 5, 2021
    Copy the full SHA
    e04c62b View commit details
  8. Fix undefined environment

    David Verdeguer committed May 5, 2021
    Copy the full SHA
    0c0bc0e View commit details
  9. Merge branch 'main' into daverlo/categoryInput

    David Verdeguer committed May 5, 2021
    Copy the full SHA
    a117668 View commit details
  10. Address comments

    David Verdeguer committed May 5, 2021
    Copy the full SHA
    cd7eedd View commit details

Commits on May 4, 2021

  1. Change from metric to rule

    The SARIF that we are interpreting has moved away from using `metric`
    to the more general term, `rule`. We need to adapt our baseline lines of
    code counting to use `rule` as well.
    Andrew Eisenberg committed May 4, 2021
    Copy the full SHA
    a2312a0 View commit details

Commits on May 3, 2021

  1. Update CodeQL bundle to 20210503 / 2.5.4

    Aditya Sharad committed May 3, 2021
    Copy the full SHA
    c3e98fb View commit details
  2. Use the category on the runner

    David Verdeguer committed May 3, 2021
    Copy the full SHA
    aa53f64 View commit details
  3. Use actionsUtil.computeAutomationID on upload-lib

    David Verdeguer committed May 3, 2021
    Copy the full SHA
    3b741b3 View commit details
  4. Forward category input to codeql cli

    David Verdeguer committed May 3, 2021
    Copy the full SHA
    c93cbc9 View commit details
  5. Add actions-util.getAutomationID()

    David Verdeguer committed May 3, 2021
    Copy the full SHA
    519d077 View commit details

Commits on Apr 30, 2021

  1. update bundle to 20210430

    Henning Makholm committed Apr 30, 2021
    Copy the full SHA
    7ab95f6 View commit details

Commits on Apr 29, 2021

  1. Add category option to runner

    David Verdeguer committed Apr 29, 2021
    Copy the full SHA
    c6e734c View commit details
  2. Don't use getOptionalInput on the runner codepath

    David Verdeguer committed Apr 29, 2021
    Copy the full SHA
    76f5ada View commit details

Commits on Apr 28, 2021

  1. Avoid analyzing excluded language files for line counting

    This change passes in a list of file types to the line counting
    analysis. These are the languages for the databases being analyzed.
    Line count analysis is restricted to these files.
    Andrew Eisenberg committed Apr 28, 2021
    Copy the full SHA
    ee23462 View commit details
  2. Add category input

    David Verdeguer committed Apr 28, 2021
    Copy the full SHA
    40fb1f3 View commit details

Commits on Apr 26, 2021

  1. Add baseline metrics for lines of code

    This commit uses a third party library to estimate the lines of code in
    a database that is to be analyzed by codeql.
    
    The estimate uses the same includes and excludes globs for determining
    which files should be counted.
    
    The lines of code count is returned by language and injected into the
    SARIF as `baseline` property in the `${language}/summary/lines-of-code`
    metric.
    Andrew Eisenberg committed Apr 26, 2021
    Copy the full SHA
    998f472 View commit details

Commits on Apr 23, 2021

  1. fix typo

    Robert committed Apr 23, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    27bf3a2 View commit details
  2. use safeWhich

    Robert committed Apr 23, 2021

    Unverified

    No user is associated with the committer email.
    Copy the full SHA
    ce467e7 View commit details
Older