mirror of
https://github.com/github/codeql-action.git
synced 2025-12-27 09:40:17 +08:00
Store generated config file in temporary directory
This prevents it from becoming part of the analysis.
This commit is contained in:
@@ -813,7 +813,7 @@ function dbLocationOrDefault(
|
||||
export async function initConfig(inputs: InitConfigInputs): Promise<Config> {
|
||||
let config: Config;
|
||||
|
||||
const { logger, workspacePath } = inputs;
|
||||
const { logger, tempDir } = inputs;
|
||||
|
||||
// if configInput is set, it takes precedence over configFile
|
||||
if (inputs.configInput) {
|
||||
@@ -822,10 +822,7 @@ export async function initConfig(inputs: InitConfigInputs): Promise<Config> {
|
||||
`Both a config file and config input were provided. Ignoring config file.`,
|
||||
);
|
||||
}
|
||||
inputs.configFile = path.resolve(
|
||||
workspacePath,
|
||||
"user-config-from-action.yml",
|
||||
);
|
||||
inputs.configFile = path.resolve(tempDir, "user-config-from-action.yml");
|
||||
fs.writeFileSync(inputs.configFile, inputs.configInput);
|
||||
logger.debug(`Using config from action input: ${inputs.configFile}`);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user