github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 17:41:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,135 Commits 445 Branches 589 Tags
155e5229973b426bd1ae2f83bb1bf42417fa2a8f
Commit Graph

10135 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
sim
155e522997 Link the PR from the changelog entry 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-07-30 18:48:10 +01:00
sim
2d3b351ea6 Handle network errors when streaming the CodeQL bundle download 
A network error such as `ECONNRESET` while streaming the download and
extraction of the CodeQL bundle terminated the `init` Action rather than
falling back to downloading the bundle before extracting it, since no
`error` listener was attached to the request returned by `https.get`.

Also pipe the response into `tar` using `stream.pipeline` so that errors
on the response itself are surfaced and `tar`'s standard input is closed,
and abort the request if it stalls.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-07-30 18:47:27 +01:00
Michael B. Gale
2e53f1cea2 Merge pull request #4056 from github/dependabot/github_actions/dot-github/workflows/actions-minor-6592b736e3 
Bump ruby/setup-ruby from 1.319.0 to 1.321.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-07-30 10:14:47 +00:00
Óscar San José
d0ee43ac62 Merge pull request #4057 from github/mergeback/v4.37.4-to-main-f205ea1c 
Mergeback v4.37.4 refs/heads/releases/v4 into main
 2026-07-30 09:37:10 +00:00
github-actions[bot]
06f1d4ffed Rebuild 2026-07-30 09:21:35 +00:00
github-actions[bot]
82f035a501 Update changelog and version after v4.37.4 2026-07-30 09:21:21 +00:00
Óscar San José
f205ea1c33 Merge pull request #4053 from github/update-v4.37.4-9130ce0f7 
Merge main into releases/v4
v4.37.4 		2026-07-30 11:19:36 +02:00
github-actions[bot]
60a57910be Rebuild 2026-07-29 17:59:24 +00:00
dependabot[bot]
3502f79575 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.319.0 to 1.321.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](003a5c4d8d...95ef2b042f)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.321.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-29 17:57:26 +00:00
Michael B. Gale
f02afd42b0 Merge pull request #4049 from github/mbg/start-proxy/job-uuid 
Generate job UUID in `start-proxy` action
 2026-07-29 15:29:24 +00:00
Michael B. Gale
d57c3ffcba Add tests for runInActions 2026-07-29 15:38:27 +01:00
github-actions[bot]
e40d079dd9 Update changelog for v4.37.4 2026-07-29 14:37:39 +00:00
Michael B. Gale
8e6fdffc32 Use runInActions for start-proxy 2026-07-29 14:44:24 +01:00
Michael B. Gale
ba46ff760e Add transformTelemetryError option to Action 2026-07-29 14:39:30 +01:00
Michael B. Gale
b411bbcd4a Move getJobUUID call into runInActions for init and setup-codeql 2026-07-29 14:38:26 +01:00
Óscar San José
9130ce0f73 Merge pull request #4051 from github/update-bundle/codeql-bundle-v2.26.2 
Update default bundle to 2.26.2
 2026-07-29 12:45:04 +00:00
Michael B. Gale
0cebd1d28d Add hasEnv delayed assertion and use for getJobUUID test 2026-07-29 13:24:33 +01:00
Michael B. Gale
d2f5cbbe91 Add get method to ReadOnlyEnv 2026-07-29 13:22:46 +01:00
github-actions[bot]
c62d824686 Add changelog note 2026-07-29 12:22:31 +00:00
github-actions[bot]
da0c190101 Update default bundle to codeql-bundle-v2.26.2 2026-07-29 12:22:25 +00:00
Michael B. Gale
36737508ec Add Env-backed ActionsEnv implementation for tests 2026-07-29 13:00:31 +01:00
Michael B. Gale
30c33c9286 Make results of function call available to delayed checks 2026-07-29 12:56:51 +01:00
Michael B. Gale
3ca82bb259 Change withActions to only allow mutations 2026-07-29 12:55:54 +01:00
Michael B. Gale
42a3b94790 Add CODEQL_ACTION_ prefix to JOB_RUN_UUID 2026-07-29 11:58:44 +01:00
Michael B. Gale
2e251072b0 Use getEnv() 2026-07-29 10:20:04 +01:00
Michael B. Gale
94a12eb6f6 Add a test for invalid values 2026-07-28 19:14:57 +01:00
Michael B. Gale
e28cbacfa1 Test that getJobUUID calls exportVariable 2026-07-28 19:13:35 +01:00
Michael B. Gale
60834a0cd9 Add exportVariable to ActionsEnv 2026-07-28 19:00:30 +01:00
Michael B. Gale
e9831f72a2 Add getRequiredInput to ActionsEnv 2026-07-28 18:59:59 +01:00
Michael B. Gale
766928d055 Call getJobUUID in start-proxy 
The `start-proxy` step precedes `init` in Default Setup
 2026-07-28 18:50:56 +01:00
Michael B. Gale
049af32c59 Allow getJobUUID to retrieve the UUID from the environment 2026-07-28 18:47:23 +01:00
Michael B. Gale
c7ae51bb2d Make ActionState available and add test 2026-07-28 18:41:41 +01:00
Michael B. Gale
1f9caf0118 Refactor jobRunUuid init into a function 
Use in `init` and `setup-codeql` actions
 2026-07-28 18:37:01 +01:00
Michael B. Gale
18420e3271 Merge pull request #4043 from github/mbg/ts/changelog 
Convert last remaining Python CI scripts to TypeScript
codeql-bundle-v2.26.2 		2026-07-28 15:27:26 +00:00
Michael B. Gale
7e8d8970f0 Merge pull request #4046 from github/mbg/repo-prop/code-quality 
Ignore configuration file repo property for unsupported analysis kinds
 2026-07-28 11:16:26 +00:00
Michael B. Gale
2d4c474c2c Log !analysisKindSupported case 2026-07-28 12:02:41 +01:00
Michael B. Gale
98c05a17d3 Fix argument validation in rollback-changelog.ts 
Co-authored-by: Mads Navntoft <navntoft@github.com>
 2026-07-28 11:51:13 +01:00
Michael B. Gale
8289a49271 Ignore repository property for unsupported analysis kinds 2026-07-27 13:23:39 +01:00
Michael B. Gale
2a8731cc06 Move config-file computation after determining the analysisKinds 2026-07-27 13:10:34 +01:00
Michael B. Gale
3434fbbc53 Merge pull request #4044 from github/mbg/ff/promote-toolcache 
Promote `AllowToolcacheInput` feature
 2026-07-24 16:29:59 +00:00
Michael B. Gale
3013ac07bd Promote AllowToolcacheInput feature 2026-07-24 16:28:21 +01:00
Michael B. Gale
74b15aa2c6 Install JS deps if needed in post-release-mergeback workflow 2026-07-24 16:19:45 +01:00
Michael B. Gale
f00f809405 Fix checking keys rather than values 2026-07-24 16:17:04 +01:00
Michael B. Gale
4c0a1f0aac Merge pull request #4037 from github/mbg/repo-props/tools 
Add repository property for `tools` input
 2026-07-24 15:09:22 +00:00
Michael B. Gale
0953dc00da Add getErrorMessage to pr-checks-local util.ts to avoid pulling in src/util.ts dependencies 2026-07-24 16:08:18 +01:00
Michael B. Gale
cbad145443 Remove Python-specific steps from workflows that no longer need them 2026-07-24 16:05:55 +01:00
Michael B. Gale
ab44eb939d Remove python from CodeQL workflow 
There is no more (non-test) Python code left to analyse, so CodeQL analysis would fail now
 2026-07-24 16:05:10 +01:00
Michael B. Gale
961b583f9a Use rollback-changelog.ts and remove Python version 2026-07-24 16:05:10 +01:00
Michael B. Gale
d71461774b Add rollback-changelog.ts with tests 2026-07-24 16:05:09 +01:00
Michael B. Gale
027ac05d3b Use bundle-changelog.ts and remove Python version 2026-07-24 16:05:09 +01:00