github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-10 14:56:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,809 Commits 487 Branches 602 Tags
b79966a8eed1b74372dee8aeba5d983c4e29f2d2
Commit Graph

10809 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
5283c3ba5a Move getDefaultCliVersion out of GitHubFeatureFlags 
It doesn't need to be in there since it doesn't depend on the API itself and call `getDefaultCliVersionFromFlags` directly
 2026-02-15 15:40:19 +00:00
Michael B. Gale
ea1a400e13 Revert "Merge pull request #3476 from github/henrymercer/retry-auth-errors" 
This reverts commit 9658e23e5b, reversing
changes made to 2d6b98c7cf.
 2026-02-15 15:39:04 +00:00
Michael B. Gale
248d7971c2 Remove superfluous try/catch 2026-02-15 15:23:38 +00:00
Michael B. Gale
64940fad4a Use author if they are GitHub staff 2026-02-13 15:10:39 +00:00
Henry Mercer
ef618feace Merge pull request #3480 from github/mergeback/v4.32.3-to-main-9e907b5e 
Mergeback v4.32.3 refs/heads/releases/v4 into main
 2026-02-13 12:21:19 +00:00
github-actions[bot]
6bddc7956d Rebuild 2026-02-13 12:01:09 +00:00
github-actions[bot]
01fcdceb89 Update changelog and version after v4.32.3 2026-02-13 11:52:49 +00:00
Henry Mercer
9e907b5e64 Merge pull request #3479 from github/update-v4.32.3-4bf6fa4e2 
Merge main into releases/v4
v4.32.3 		2026-02-13 11:50:53 +00:00
github-actions[bot]
1814c9fbfd Update changelog for v4.32.3 2026-02-13 11:17:52 +00:00
Henry Mercer
4bf6fa4e2d Merge pull request #3478 from github/mbg/changelog/add-connection-test-entry 
Add changelog entry for #3466
 2026-02-13 11:12:32 +00:00
Henry Mercer
9658e23e5b Merge pull request #3476 from github/henrymercer/retry-auth-errors 
Avoid requesting features in CCR
 2026-02-13 11:11:50 +00:00
Michael B. Gale
e1933c66bd Find all missing messages in checkExpectedLogMessages 2026-02-12 23:22:33 +00:00
Michael B. Gale
edf36092cf Add RecordingLogger that keeps track of groups 2026-02-12 23:21:58 +00:00
Michael B. Gale
15a3d32df0 Extend uploadPayload tests to all analysis kinds 2026-02-12 22:28:27 +00:00
Michael B. Gale
9835994414 CSRA category does not need to be adjusted 2026-02-12 20:16:22 +00:00
Michael B. Gale
0ce6420f8e Validate CODEQL_ACTION_CSRA_ASSESSMENT_ID value 2026-02-12 20:15:18 +00:00
Michael B. Gale
be75dd92ea Add changelog entry for #3466 2026-02-12 19:40:23 +00:00
Henry Mercer
05bca54402 Apply suggestion from @Copilot 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-02-12 17:37:10 +00:00
Michael B. Gale
2d6b98c7cf Merge pull request #3475 from github/henrymercer/retry-auth-errors 
Retry API authentication errors since these can be transient
 2026-02-12 17:04:05 +00:00
Henry Mercer
876cecb383 Avoid requesting features in CCR 2026-02-12 16:53:19 +00:00
Henry Mercer
43b46a19be Retry API authentication errors since these can be transient 2026-02-12 16:19:04 +00:00
Michael B. Gale
8ad4b6ec58 Merge pull request #3472 from github/dependabot/github_actions/dot-github/workflows/actions-minor-299c02fd34 
Bump ruby/setup-ruby from 1.286.0 to 1.288.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-02-12 14:00:07 +00:00
Michael B. Gale
4edc7d2e82 Merge pull request #3467 from github/dependabot/npm_and_yarn/npm-minor-5707d09364 
Bump the npm-minor group with 2 updates
 2026-02-12 13:33:11 +00:00
Michael B. Gale
2adcb6464e Add BasePayload type and derive AssessmentPayload from it 2026-02-12 00:13:22 +00:00
Michael B. Gale
da67096c6f Change assessment_id to be a number 2026-02-12 00:10:42 +00:00
Michael B. Gale
c48cd247df Add assessment_id to CSRA payload 2026-02-11 23:56:52 +00:00
Michael B. Gale
0cfcceb4b8 Add transformPayload to AnalysisConfig 2026-02-11 23:56:51 +00:00
Michael B. Gale
cbb92e7ff6 Type the upload payload object 2026-02-11 23:56:51 +00:00
Michael B. Gale
db9346285d Add csra case to addSarifExtension test 2026-02-11 23:28:38 +00:00
Michael B. Gale
2de76b6faa Update PR check for csra 2026-02-11 22:46:24 +00:00
Michael B. Gale
6a17f4e258 Update getPrimaryAnalysis* and add test 2026-02-11 22:46:24 +00:00
Michael B. Gale
8cc4d2539b Remove redundant analysis kind check 2026-02-11 22:14:39 +00:00
Michael B. Gale
406bbfcef1 Update upload-lib tests for CSRA 2026-02-11 22:11:17 +00:00
Michael B. Gale
5132eb53f2 Fix CodeScanning config's sarifPredicate and add test 2026-02-11 22:10:55 +00:00
Michael B. Gale
5b3261bcbf Enforce that only compatible kinds can be enabled concurrently 2026-02-11 20:14:37 +00:00
Michael B. Gale
9267d8d51e Add csra analysis kind 2026-02-11 19:48:06 +00:00
Michael B. Gale
bc1164e014 Fix typo in test 2026-02-11 19:35:29 +00:00
Michael B. Gale
7801eda177 Add some basic unit tests 2026-02-11 19:23:35 +00:00
Michael B. Gale
b1d963ed8f Gate updated cert gen behind FF 2026-02-11 19:23:10 +00:00
Michael B. Gale
d636fb3f63 Move certificate code to its own file 2026-02-11 19:23:09 +00:00
Michael B. Gale
d155ebf27f Set more extensions 2026-02-11 19:23:09 +00:00
Michael B. Gale
e8f0116911 Explicitly sign certificate with SHA256 2026-02-11 19:23:09 +00:00
Michael B. Gale
713a293090 Set keyUsage 2026-02-11 19:23:08 +00:00
Michael B. Gale
ff33514494 Merge pull request #3466 from github/mbg/start-proxy/test-connections 
Test connections to private registries in `start-proxy`
 2026-02-11 19:19:02 +00:00
Michael B. Gale
efb92e2714 Skip checks for non-URLs for now 2026-02-11 18:02:24 +00:00
github-actions[bot]
d73644591f Rebuild 2026-02-11 18:01:35 +00:00
dependabot[bot]
41d2cc39b6 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.286.0 to 1.288.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](90be1154f9...09a7688d3b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.288.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-11 17:59:56 +00:00
github-actions[bot]
be578c7735 Rebuild 2026-02-11 17:54:50 +00:00
dependabot[bot]
fa6e24cf12 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `@eslint/compat` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.2/packages/compat)

Updates `eslint-plugin-jsdoc` from 62.4.1 to 62.5.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.4.1...v62.5.0)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-11 17:53:12 +00:00
Michael B. Gale
2b5b614c85 Add timeout event handler 2026-02-11 17:50:44 +00:00