Paolo Tranquilli
25c8db918a
Revert "Specify reason for skipping SARIF upload in logs"
...
This reverts commit 680b07003d
2025-10-06 16:59:45 +02:00
Paolo Tranquilli
680b07003d
Specify reason for skipping SARIF upload in logs
2025-10-06 15:39:29 +02:00
Michael B. Gale
22aba57acf
Include analysis kind in payloadSaveFile path in uploadPayload
2025-10-06 14:30:30 +01:00
Paolo Tranquilli
e0b9da7b0a
Introduce CODEQL_ACTION_SKIP_SARIF_UPLOAD
...
This triggers a subset of the behavior of `CODEQL_ACTION_TEST_MODE`,
specifically just skipping the SARIF upload step. This is required for
our internal testing where we want the SARIF file (via
`CODEQL_ACTION_DUMP_SARIF_DIR`) but don't want to actually upload it,
but we don't want the rest of the behaviour of `CODEQL_ACTION_TEST_MODE`
that is specific for `codeql-action` own CI checks.
2025-10-06 14:38:32 +02:00
Michael B. Gale
726a341ed4
Restrict when tools: toolcache can be used
2025-10-06 13:16:16 +01:00
Michael B. Gale
1cc5eb6636
Use semver.compare instead of semver.lt
2025-10-06 12:58:00 +01:00
Michael B. Gale
43ce7ef399
Add isDynamicWorkflow function
2025-10-06 12:55:54 +01:00
Mario Campos
b2e22323e2
Merge remote-tracking branch 'origin/main' into mario-campos/node24
...
# Conflicts:
# lib/analyze-action-post.js
# lib/analyze-action.js
# lib/autobuild-action.js
# lib/init-action-post.js
# lib/init-action.js
# lib/resolve-environment-action.js
# lib/start-proxy-action-post.js
# lib/start-proxy-action.js
# lib/upload-lib.js
# lib/upload-sarif-action-post.js
# lib/upload-sarif-action.js
# package-lock.json
# package.json
2025-10-03 12:59:21 -05:00
Michael B. Gale
425ef85595
Support requesting CLI from toolcache with tools: toolcache
2025-10-03 15:40:33 +01:00
Michael B. Gale
297313df79
Add getLatestToolcacheVersion with tests
2025-10-03 14:40:34 +01:00
Michael B. Gale
7fb8378d93
Re-throw exception in createStatusReportBase when in test mode
2025-10-03 11:59:36 +01:00
Mario Campos
54ae8ba5b1
Simplify PR check by reverting changes to @types/node.
2025-10-02 14:24:46 -05:00
github-actions[bot]
70836b1ec4
Rebuild
2025-10-02 13:55:07 +00:00
Henry Mercer
d899b2ed98
Merge branch 'main' into mario-campos/node24
2025-10-02 12:36:53 +01:00
Michael B. Gale
10feb5d2a2
Merge pull request #3167 from github/mbg/upload-sarif/find-then-filter
...
Find, then filter, SARIF files for `upload-sarif` Action
2025-10-02 11:51:47 +01:00
Michael B. Gale
91a63dc72c
Remove undefined values from results of unsafeEntriesInvariant
2025-10-01 15:28:56 +01:00
Mario Campos
30445af89f
Rebuild JS after upgrading to Node.js 24.
2025-09-30 14:11:04 -05:00
Michael B. Gale
9a0b46abff
Rename keys and entries helpers and update docs
2025-09-30 12:52:04 +01:00
Michael B. Gale
b8c496644d
Rename variables in getGroupedSarifFilePaths
2025-09-30 12:05:59 +01:00
Michael B. Gale
ad086e4d90
Use path.extname for some extension checks
2025-09-30 11:55:04 +01:00
github-actions[bot]
b5caf1196e
Update default bundle to codeql-bundle-v2.23.2
2025-09-30 08:31:45 +00:00
Michael B. Gale
93711d3d89
Print a warning when there are sarifFiles in getGroupedSarifFilePaths that don't belong to an analysis kind
2025-09-29 15:07:16 +01:00
Michael B. Gale
056fb86575
Call fixCategory in uploadSpecifiedFiles
...
Since `fixCategory` is now part of `AnalysisConfig`, we don't have to remember to do it at the call site for `uploadSpecifiedFiles` or `uploadFiles` anymore.
2025-09-29 15:07:16 +01:00
Michael B. Gale
63d1b25e97
Use getGroupedSarifFilePaths for upload-sarif Action
2025-09-29 15:07:16 +01:00
Michael B. Gale
717d581574
Add fixCategory to AnalysisConfig
2025-09-29 15:07:15 +01:00
Michael B. Gale
fe0376ed1f
Add getGroupedSarifFilePaths with tests
2025-09-29 15:07:13 +01:00
Michael B. Gale
36adfa7b0f
Merge pull request #3166 from github/mbg/upload-sarif/add-tests
...
Add tests for `upload-sarif`
2025-09-29 15:06:31 +01:00
Óscar San José
f0a08a4bf5
Merge pull request #3159 from github/oscarsj/update-brace-expansion-dep
...
Update vulnerable dependency brace-expansion
2025-09-29 12:13:53 +02:00
Michael B. Gale
5fd2cfe1ef
Fail if no SARIF files were uploaded
2025-09-29 09:04:44 +01:00
Michael B. Gale
9f452fad0f
Move core upload-sarif logic to upload-sarif module
...
Note that this also fixes the format of the `sarif-ids` outputs to match what is documented
2025-09-29 08:57:52 +01:00
Michael B. Gale
5fc9e66105
Move findAndUpload to a new module
2025-09-29 08:44:44 +01:00
github-actions[bot]
b66e847aaf
Rebuild
2025-09-26 17:35:46 +00:00
Michael B. Gale
0b7fc56648
Fix upload-sarif not uploading non-.sarif files
2025-09-26 17:47:59 +01:00
Óscar San José
2f0649510e
Build lib
2025-09-26 16:45:21 +02:00
Henry Mercer
65925679a3
Merge pull request #3139 from github/henrymercer/fix-log-message
...
Fix `tools: linked` log message
2025-09-25 16:48:44 +01:00
Michael B. Gale
455038c8a7
Add script to check whether npm i needs to be run
...
and add it to the `build` command
2025-09-25 14:45:55 +01:00
Michael B. Gale
a645d167d6
Add npm run ava command (for ava without a specific path)
2025-09-25 14:22:38 +01:00
Henry Mercer
b1d32cf356
Merge branch 'main' into henrymercer/fix-log-message
2025-09-25 13:06:54 +01:00
github-actions[bot]
4d32274da6
Rebuild
2025-09-25 10:50:17 +00:00
Michael B. Gale
39842d8f83
Merge pull request #3146 from github/mbg/start-proxy/authenticate
...
Provide `Authorization` header when downloading `update-job-proxy`
2025-09-24 19:09:40 +01:00
Michael B. Gale
6ccec2ac14
Remove url from log messages
2025-09-24 18:54:49 +01:00
github-actions[bot]
f134e09015
Rebuild
2025-09-24 15:14:06 +00:00
Michael B. Gale
4e820a4ca4
Apply review feedback
2025-09-24 15:50:19 +01:00
Michael B. Gale
efcf614b5d
Refactor assembling Authorization header value into its own function
2025-09-24 12:40:15 +01:00
github-actions[bot]
f54c1c0b33
Rebuild
2025-09-24 10:14:58 +00:00
Henry Mercer
50fc7e9236
Fix tools: linked log message
2025-09-23 14:53:29 +02:00
github-actions[bot]
2bbfe979c3
Update default bundle to codeql-bundle-v2.23.1
2025-09-23 13:27:06 +01:00
Kasper Svendsen
e2f4bf692b
Bump minimum CLI version for overlay analysis
2025-09-23 12:08:15 +02:00
Michael B. Gale
665891b4f2
Merge pull request #3126 from github/mbg/add/properties-api
...
Add support for the repository properties API
2025-09-23 10:17:52 +01:00
Michael B. Gale
b4f966a31a
Add FF to control whether to fetch repository properties
2025-09-22 20:26:56 +01:00
