mirror of
https://github.com/github/codeql-action.git
synced 2025-12-31 03:30:14 +08:00
a21bb7f968
- The `upload` input to the `analyze` Action now accepts the following values:
- `always` is the default value, which uploads the SARIF file to Code Scanning for successful and failed runs.
- `failure-only` is recommended for customers post-processing the SARIF file before uploading it to Code Scanning. This option uploads debugging information to Code Scanning for failed runs to improve the debugging experience.
- `never` avoids uploading the SARIF file to Code Scanning even if the code scanning run fails. This is not recommended for external users since it complicates debugging.
- The legacy `true` and `false` options will be interpreted as `always` and `failure-only` respectively.
---------
Co-authored-by: Henry Mercer <henry.mercer@me.com>
55 lines
1.5 KiB
YAML
55 lines
1.5 KiB
YAML
name: Query Filter Test
|
|
description: Runs a test of query filters using the check SARIF action
|
|
inputs:
|
|
sarif-file:
|
|
required: true
|
|
description: The SARIF file to check
|
|
|
|
queries-run:
|
|
required: true
|
|
description: |
|
|
Comma separated list of query ids that should be included in this SARIF file.
|
|
|
|
queries-not-run:
|
|
required: true
|
|
description: |
|
|
Comma separated list of query ids that should NOT be included in this SARIF file.
|
|
|
|
config-file:
|
|
required: true
|
|
description: |
|
|
The location of the codeql configuration file to use.
|
|
|
|
tools:
|
|
required: true
|
|
description: |
|
|
The url of codeql to use.
|
|
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- uses: ./../action/init
|
|
with:
|
|
languages: javascript
|
|
config-file: ${{ inputs.config-file }}
|
|
tools: ${{ inputs.tools }}
|
|
db-location: ${{ runner.temp }}/query-filter-test
|
|
env:
|
|
CODEQL_ACTION_TEST_MODE: "true"
|
|
- uses: ./../action/analyze
|
|
with:
|
|
output: ${{ runner.temp }}/results
|
|
upload-database: false
|
|
upload: never
|
|
env:
|
|
CODEQL_ACTION_TEST_MODE: "true"
|
|
- name: Check SARIF
|
|
uses: ./../action/.github/check-sarif
|
|
with:
|
|
sarif-file: ${{ inputs.sarif-file }}
|
|
queries-run: ${{ inputs.queries-run}}
|
|
queries-not-run: ${{ inputs.queries-not-run}}
|
|
- name: Cleanup after test
|
|
shell: bash
|
|
run: rm -rf "$RUNNER_TEMP/results" "$RUNNER_TEMP/query-filter-test"
|