name: "Zstandard bundle (streaming)" description: "Stream the download and extraction of a Zstandard-compressed CodeQL Bundle" versions: - linked operatingSystems: - macos - ubuntu env: CODEQL_ACTION_ZSTD_BUNDLE: true CODEQL_ACTION_ZSTD_BUNDLE_STREAMING_EXTRACTION: true steps: - name: Remove CodeQL from toolcache uses: actions/github-script@v7 with: script: | const fs = require('fs'); const path = require('path'); const codeqlPath = path.join(process.env['RUNNER_TOOL_CACHE'], 'CodeQL'); if (codeqlPath !== undefined) { fs.rmdirSync(codeqlPath, { recursive: true }); } - id: init uses: ./../action/init with: languages: javascript tools: ${{ steps.prepare-test.outputs.tools-url }} - uses: ./../action/analyze with: output: ${{ runner.temp }}/results upload-database: false - name: Upload SARIF uses: actions/upload-artifact@v4 with: name: ${{ matrix.os }}-zstd-bundle.sarif path: ${{ runner.temp }}/results/javascript.sarif retention-days: 7 - name: Check diagnostic with expected tools URL appears in SARIF uses: actions/github-script@v7 env: SARIF_PATH: ${{ runner.temp }}/results/javascript.sarif with: script: | const fs = require('fs'); const sarif = JSON.parse(fs.readFileSync(process.env['SARIF_PATH'], 'utf8')); const run = sarif.runs[0]; const toolExecutionNotifications = run.invocations[0].toolExecutionNotifications; const downloadTelemetryNotifications = toolExecutionNotifications.filter(n => n.descriptor.id === 'codeql-action/bundle-download-telemetry' ); if (downloadTelemetryNotifications.length !== 1) { core.setFailed( 'Expected exactly one reporting descriptor in the ' + `'runs[].invocations[].toolExecutionNotifications[]' SARIF property, but found ` + `${downloadTelemetryNotifications.length}. All notification reporting descriptors: ` + `${JSON.stringify(toolExecutionNotifications)}.` ); } const toolsUrl = downloadTelemetryNotifications[0].properties.attributes.toolsUrl; console.log(`Found tools URL: ${toolsUrl}`); if (!toolsUrl.endsWith('.tar.zst')) { core.setFailed( `Expected the tools URL to be a .tar.zst file, but found ${toolsUrl}.` ); }