Aditya Sharad
caa2a0df0a
Runner tests: Attempt to source the tracer env, display the binary path
2022-07-27 12:05:31 -07:00
Aditya Sharad
a2f4d66a8b
Runner tests: Read CODEQL_RUNNER from the stored JSON
...
This test workflow does not source the environment from the init step,
so we need to manually read in the variable.
2022-07-25 15:33:52 -07:00
Aditya Sharad
58faf9d60c
Actions: Disable the CLR tracer in C# autobuild test
...
Ensure that this succeeds even if the legacy CLR tracer is not enabled.
The combination of the regular tracer and the SIP workaround within Actions
should be sufficient for this to pass.
2022-07-25 15:02:42 -07:00
Aditya Sharad
dc1c51db28
Actions: Fix failing Runner autobuild test on macOS
...
Add the missing `$CODEQL_RUNNER` prefix to the autobuild command line.
This intermediate process works around System Integrity Protection,
allowing the tracer to start the C# extractor for the dotnet builds
within the autobuild process.
The test used to pass without this because the legacy CLR tracer bypassed SIP
while dotnet 5 was used on the Actions virtual environment.
Now that the virtual environment uses dotnet 6, the CLR tracer no longer works,
and we need to explicitly work around SIP.
This test will eventually be replaced by an internal integration test for the
equivalent functionality in the CLI. For now, this change makes the test
continue to pass.
2022-07-25 14:06:23 -07:00
Aditya Sharad
2d2dfa3424
Remove duplicate CI workflow
2022-07-25 14:01:12 -07:00
Cornelius Riemenschneider
ceec52c4bc
Address review.
2022-07-21 17:03:57 +00:00
Cornelius Riemenschneider
a32664975f
autobuild-action: Run autobuilders with $CODEQL_RUNNER set.
...
Without this, the tracer will not be injected on MacOS, as we need the
runner to circumvent SIP.
Also add a test that tests the autobuild-action to exercise this code path.
2022-07-21 15:51:54 +00:00
Henry Mercer
816b3e91bc
Update failure message
...
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com >
2022-07-12 17:52:15 +01:00
Henry Mercer
fbbd1dcd52
Fix extra double quote
...
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com >
2022-07-12 17:44:51 +01:00
Henry Mercer
0a5dad3c83
Allow authenticating via the GitHub CLI
...
We no longer run this script within Actions for security reasons, and
when running locally we can authenticate with the GitHub CLI instead
of a PAT.
2022-07-12 17:33:24 +01:00
Henry Mercer
d61e3fdf02
Fix shellcheck errors
...
Avoid trying to evaluate `github/codeql-action`.
2022-07-12 17:31:31 +01:00
Henry Mercer
79ec03f3e5
Run npm scripts on using bash so Windows can find commands
2022-06-29 18:58:38 +01:00
Henry Mercer
7ebbfcbbdd
Run unit tests on Windows too
2022-06-29 10:07:31 +01:00
Henry Mercer
9953936347
Add instructions to remove deleted JS / source map files in PR check
2022-06-28 18:24:18 +01:00
Andrew Eisenberg
934c0340a7
Update CHANGELOG.md
2022-06-24 10:21:24 -07:00
Andrew Eisenberg
8bfe3c6be5
Disable python2 + poetry
2022-06-24 10:09:46 -07:00
Andrew Eisenberg
e524cd64db
Update branch names for check-for-conflicts.yml job
2022-06-22 16:07:46 -07:00
Andrew Eisenberg
99d4397d88
Revert "Add capability to filter queries #1098 "
...
https://github.com/github/codeql-action/pull/1098
This reverts commit 777b77840959ca9b59cbeec34d5f0540b280032c
2022-06-21 13:49:33 -07:00
Edoardo Pirovano
5a6f006e4d
Fix issue with required checks sync script
2022-06-21 13:20:45 +01:00
Andrew Eisenberg
7adb33da1d
Ensure there are no duplicates when sending up required checks
...
This breaks the API. Also, fix the checks that had duplicate names.
2022-06-16 20:31:29 -07:00
Andrew Eisenberg
c7785f6b91
Fix input to action
2022-06-16 18:34:04 -07:00
Andrew Eisenberg
7c412c67ba
Merge branch 'aeisenberg/check-sarif-action' into aeisenberg/remove-queries
2022-06-16 02:42:30 +02:00
Andrew Eisenberg
d7459f0368
Merge branch 'aeisenberg/check-sarif-action' into aeisenberg/remove-queries
2022-06-16 02:22:34 +02:00
Andrew Eisenberg
777b778409
Spelling, capitalization, and better descriptions
2022-06-15 17:18:35 -07:00
Andrew Eisenberg
59ca9b59cb
Extract query-filters test into a composite action
...
Removes duplicated yaml.
Also add some better typings.
2022-06-15 16:32:33 -07:00
Andrew Eisenberg
6834383903
Apply suggestions from code review
...
Co-authored-by: Henry Mercer <henrymercer@github.com >
2022-06-15 16:27:01 -07:00
Andrew Eisenberg
4918636a75
Clarify variable names in new action
...
Also simplify some computations.
2022-06-15 16:06:16 -07:00
Andrew Eisenberg
eec34d5f05
Add integration tests for query filters
2022-06-14 14:10:08 -07:00
Andrew Eisenberg
bcb7fad5b3
Add the check-sarif action
...
Allows us to analyze and then check that certain queries were included
in the analysis and others were not.
2022-06-14 11:55:10 -07:00
Henry Mercer
533ce91971
Merge remote-tracking branch 'origin/main' into henrymercer/run-atm-on-windows
2022-05-11 19:32:14 +01:00
Henry Mercer
3bb6c41212
Remove an extraneous commit during the release process
...
We only need to run `git commit` after the `git merge` call if there were conflicts.
2022-05-11 10:50:13 +01:00
Andrew Eisenberg
827fd55c21
Create update-required-checks script
...
This also removes the .github/workflows/update-required-checks.yml
workflow. This script needs to be run locally by someone who has
admin privileges on the repo.
2022-05-09 14:59:16 -07:00
Andrew Eisenberg
06d4e82bd2
Add permissions block to workflow
2022-05-02 12:01:19 -07:00
Andrew Eisenberg
b71f20d70f
Add workflow to regenerate required checks
...
Update contributing guide.
Ensure this workflow runs once a week.
2022-05-02 10:15:40 -07:00
Andrew Eisenberg
a73e506617
Fix syntax error in workflow
2022-04-29 17:33:21 -07:00
Andrew Eisenberg
922dc2b976
Use the --resolve-query-specs parameter of pack download
...
This will allow the command to resolve packs with paths.
Also, use a more concise version of `tr`.
2022-04-29 10:54:01 -07:00
Andrew Eisenberg
06b15c22b1
Allow pack specifiers to include paths
...
Also, this cleans up our pack-related integration tests.
We are now testing with the most recent CLIs.
2022-04-28 17:14:30 -07:00
Henry Mercer
ed0abc6cac
Log the expected outcome of the tests for clarity
2022-04-28 19:21:56 +01:00
Henry Mercer
193cfa588d
Update PR checks for Windows and CodeQL CLI 2.9.0+
2022-04-28 19:18:15 +01:00
Henry Mercer
2b8fdb3f2e
Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
2022-04-25 17:02:03 +01:00
Henry Mercer
074853a9a2
Suggest resolving conflicts by adding new commits vs amending the merge commit
...
This gives us slightly messier git history, but more importantly makes
reviewing substantially easier.
2022-04-25 16:37:32 +01:00
Henry Mercer
5b5ed44ab7
Add a PR check to check for conflict markers
...
This check is primarily intended to validate that any merge conflicts in
the v2 -> v1 backport PR are fixed before the PR is merged.
2022-04-14 20:05:42 +01:00
Henry Mercer
9daf1de73c
Update references to release branches
...
Prepare for renaming `v1` -> `releases/v1` and `v2` -> `releases/v2`.
2022-04-14 17:48:46 +01:00
Henry Mercer
bce749b10f
Improve consistency of variable references in Bash
2022-04-14 17:48:46 +01:00
Henry Mercer
fce4a01cd7
Update the major version tag within the release process
2022-04-14 17:48:46 +01:00
Henry Mercer
bac9320f4f
Update description of "Tag release and merge back" workflow
2022-04-14 17:48:46 +01:00
Henry Mercer
f6312f1322
Commit any conflicts during v1 backport to simplify release process
...
The process of creating the v1 release can run into merge conflicts. We
commit the unresolved conflicts so a maintainer can easily resolve them
(vs erroring and requiring maintainers to reconstruct the release
manually).
2022-04-14 16:08:38 +01:00
Chuan-kai Lin
6f174084dd
Add autobuild workind-directory test
2022-04-08 15:18:11 -07:00
Henry Mercer
dc0338e493
Use latest major version of actions/upload-artifact
2022-03-31 10:11:33 +01:00
Henry Mercer
57096fe795
Add a PR check to validate that ML-powered queries are run correctly
2022-03-31 10:11:30 +01:00
