github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-06 07:48:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
8,215 Commits 290 Branches 494 Tags
main
Commit Graph

69 Commits

Author SHA1 Message Date
Mario Campos
7434149006 Upgrade Node.js version to 24. 
This requires creating a new major-version (v4) of codeql-action.
 2025-09-30 13:56:31 -05:00
Henry Mercer
5ab5aef079 Document nightly tools input in action.yml 2025-09-22 15:48:23 +02:00
Michael B. Gale
15403aac29 Mark quality-queries input as deprecated 2025-09-02 17:31:56 +01:00
Michael B. Gale
e0104a269f Add analysis-kinds input and parse it 2025-08-27 18:23:01 +01:00
Michael B. Gale
0fb9447fd1 Mark quality-queries input as "Internal" for now 2025-06-16 13:25:01 +01:00
Michael B. Gale
f10997b601 Add new quality-queries input to init action 2025-06-16 13:17:21 +01:00
Michael B. Gale
1a7989f395 Add dependency-caching input to Action 2024-10-29 12:06:17 +00:00
Matt Schwager
e1f83c153a Fix #2367, add codeql-version to outputs 2024-07-10 11:58:42 -04:00
Henry Mercer
9f32769e43 Update docs for build-mode: autobuild 
The `autobuild` Action is no longer needed or recommended.
 2024-05-15 09:44:06 +01:00
Fotis Koutoulakis (@NlightNFotis)
4f59156fc8 Improve wording on internal workflows and add clarification for tools input in the description. 2024-05-13 10:46:04 +01:00
Fotis Koutoulakis
eb4969f5e2 Clarify wording 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2024-05-10 18:03:16 +01:00
Fotis Koutoulakis (@NlightNFotis)
6182f337aa Add documentation for the tools option in the various workflow files 2024-05-10 16:57:20 +01:00
Rasmus Wriedt Larsen
3d026bcb8d Apply suggestions from code review 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2024-04-09 12:28:29 +02:00
Rasmus Wriedt Larsen
d33e75159d Warn on deprecated Python dep inst config usage 2024-04-08 11:58:31 +02:00
Henry Mercer
a009e4d1af Remove "experimental" designation from packs input 2024-03-13 18:43:55 +00:00
Henry Mercer
24c3eda0e3 Escape named value in input description 2024-03-08 17:35:02 +00:00
Henry Mercer
27a6cd0a11 Remove experimental qualifiers from build mode input 2024-03-08 17:23:16 +00:00
Henry Mercer
1bac334738 Update languages help 
Recommend using a matrix build
 2024-03-08 17:21:57 +00:00
Henry Mercer
b58c2f67a6 Detail requirements for different build modes 2024-02-01 12:00:56 +00:00
Henry Mercer
401f9d6286 Add experimental build-mode input to init Action 2024-01-30 19:03:22 +00:00
nickfyson
6b5b958063 remove dedundant single quotes from node version strings 2023-12-13 11:38:14 +00:00
nickfyson
d651fbc494 change to node20 for all actions 2023-12-07 14:07:26 +00:00
Igwe Kalu
517782a2a0 Improve description of codeql-action/init languages input (#1919) 2023-10-04 12:01:23 -07:00
Tugdual Grall
a9fb7d923c Update init/action.yml : PR review 
Co-authored-by: Henry Mercer <henry.mercer@me.com>
 2023-04-10 07:37:20 +02:00
tgrall
fe4a785361 rename new parameter from configuration to config 2023-04-01 07:13:01 +02:00
Tugdual Grall
ee44252240 - Add new configuration Parameter 
- Write test to check it is read from configuration
- Update documentation
 2023-03-18 13:40:54 +00:00
Andrew Eisenberg
5dcb9dec2d Update changelog and input descriptions 2022-09-07 14:38:58 -07:00
Andrew Eisenberg
376fea671d Clarify description of registries input 2022-09-06 14:06:30 -07:00
Andrew Eisenberg
bf97a6da5b Apply suggestions from code review 2022-09-06 10:41:32 -07:00
Andrew Eisenberg
abdf26c28f Convert from json to yaml for registries input 2022-09-02 15:03:51 -07:00
Andrew Eisenberg
e9b47b1898 Change to using a single input 2022-09-01 16:07:26 -07:00
Andrew Eisenberg
0e98efa2bb Add support for downloading packs from GHES 
This change adds:

- new `registries` block allowed in code scanning config file
- new `registries-auth-tokens` input in init action
- Change the downloadPacks function so that it accepts new parameters:
    - registries block
    - api auth
- Generate a qlconfig.yml file with the registries block if one is
  supplied. Use this file when downloading packs.
- temporarily set the `GITHUB_TOKEN` and `CODEQL_REGISTRIES_AUTH` based
  on api auth

TODO:

1. integration test
2. handle pack downloads when the config is generated by the CLI
 2022-08-30 10:04:30 -07:00
Angela P Wen
90676d9cb9 Merge remote-tracking branch 'origin/main' into angelapwen/post-init-cleanup 2022-08-10 15:08:04 +02:00
Angela P Wen
010abe7de0 Merge remote-tracking branch 'origin/main' into angelapwen/post-init-cleanup 2022-08-08 13:41:15 +02:00
Edoardo Pirovano
8f867dcb21 Introduce TRAP caching 2022-08-05 17:48:05 +01:00
Edoardo Pirovano
2d5738c1ac Add option to override TRAP caching feature flag 2022-08-05 12:04:02 +01:00
Angela P Wen
44a27e6a51 Add top level comments, rename cleanup to post 2022-08-02 12:08:18 +02:00
Angela P Wen
1016eba538 Move logs, SARIF actions uploads to post: hooks 2022-07-29 11:29:39 +02:00
Henry Mercer
0c729c81f2 Mention that debug mode is automatically enabled when step debugging on 2022-07-01 17:59:10 +01:00
Henry Mercer
3d23aade46 Use Node.js v16 in all Actions 2022-03-28 14:39:00 +01:00
Henry Mercer
21c48e7a01 Revert "Use Node.js v16 in all Actions" 
This reverts commit 34c777f8d0.
 2022-02-17 13:51:03 +00:00
Henry Mercer
34c777f8d0 Use Node.js v16 in all Actions 
This is now in active LTS status.
 2022-02-08 13:55:23 +00:00
Edoardo Pirovano
e677af3fd0 Make name of debugging artifact and DB within it configurable 2022-01-07 15:10:26 +00:00
Edoardo Pirovano
bc31f604d3 Add an option to upload some debugging artifacts 2021-11-01 16:12:50 +00:00
Chuan-kai Lin
70b730eb7d Add RAM and threads options to init action 2021-10-28 15:09:59 -07:00
Mario Campos
66df091046 Refer to $GITHUB_WORKSPACE specifically in source-root description 
Previously, I had tried to refer to '${{ github.workspace }}', but that caused a problem in Actions. Trying to avoid the issue, I changed this to "the workspace," but this gives up quite a bit of specificity.

Co-authored-by: Arthur Baars <aibaars@github.com>
 2021-06-30 12:32:07 -05:00
Mario Campos
a05a7f9cb1 Remove '${{ github.workspace }}' from action.yml 
It causes the action to break (or rather that context being unavailable causes it to fail), despite it being in the description field.
 2021-06-29 16:05:45 -05:00
Mario Campos
337ae83a84 Make 'source-root' init input relative to github.workspace 
In the previous commit, the default value of the input is ${{ github.workspace }}
which means that most uses of this input would probably prefix their paths with
${{ github.workspace }}, especially since actions/checkout's 'path' input
must be under ${{ github.workspace }}. Therefore, it doesn't make much sense for
this to be an absolute file path.

Instead, it's more intuitive to make this relative to the repository.
 2021-06-29 16:00:55 -05:00
Mario Campos
42babdf2c1 Add 'source-root' input to init action 
This input is exposed in the CodeQL CLI as the flag --source-root, allowing
users of the CLI to set --source-root different from --working-dir. However,
in codeql-action, these two paths are conflated and it poses problems for
users with complicated build environments, in which a source root may be
a child of the working directory.

Most users should not notice this, as the default value is
${{ github.workspace }}, as it is implied now (`path.resolve()`).
 2021-06-29 15:16:32 -05:00
Andrew Eisenberg
4087f37d90 Add extra integration test for packaging 
Also, update the options and inputs documentation.
 2021-06-25 10:07:51 -07:00