github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-21 10:11:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,782 Commits 462 Branches 595 Tags
dabc0161e78879173dfacbf2ae36995cbda7996a
Commit Graph

10782 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
dabc0161e7 Fix artifact pattern 2026-10-16 13:48:02 +01:00
Michael B. Gale
d60475591a Ensure that rootDirectory is suitable for sarifFile in uploadSarifArtifact 2026-10-16 13:09:16 +01:00
Michael B. Gale
c3c2f74292 Improve logging in uploadSarifArtifact and when it is called in tests 2026-10-16 13:08:00 +01:00
Michael B. Gale
63a243cb30 Skip waiting for SARIF if nothing was uploaded 2026-10-16 13:07:14 +01:00
Michael B. Gale
0b22918106 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-16 12:28:09 +01:00
Michael B. Gale
b5557b885e Omit --sarif-codescanning-config if the config file doesn't exist 2026-10-16 12:23:17 +01:00
Michael B. Gale
4935fda41a Propagate Config to combineSarifFilesUsingCLI 2026-10-16 12:23:17 +01:00
Michael B. Gale
6a7215f9ec Add skipped analyze step 2026-10-16 12:23:17 +01:00
Michael B. Gale
ae24060c08 Use CODEQL_ACTION_SKIP_GENERATE_FAILED_SARIF in new e2e test 2026-10-16 12:23:16 +01:00
Michael B. Gale
89e7146b71 Add and use shouldSkipGenerateFailedSarif 2026-10-16 12:23:16 +01:00
Michael B. Gale
f83967b909 Allow to explicitly not skip the SARIF upload 2026-10-16 12:23:16 +01:00
Michael B. Gale
0a458f10ac Merge pull request #4230 from github/mbg/auth/allow-unauthed 
Make `auth` in `GitHubApiDetails` optional
 2026-10-16 11:05:53 +00:00
Michael B. Gale
f80ca03949 Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-15 14:26:52 +01:00
Michael B. Gale
7a6e2f798f Merge pull request #4240 from github/mergeback/v4.39.0-to-main-6f2ac81f 
Mergeback v4.39.0 refs/heads/releases/v4 into main
 2026-10-15 11:25:10 +00:00
github-actions[bot]
46d3daa879 Rebuild 2026-10-15 10:57:15 +00:00
github-actions[bot]
2edace40f1 Update changelog and version after v4.39.0 2026-10-15 10:57:06 +00:00
Michael B. Gale
6f2ac81f5c Merge pull request #4239 from github/update-v4.39.0-d63383a73 
Merge main into releases/v4
v4 v4.39.0 		2026-10-15 11:55:44 +01:00
Michael B. Gale
eb1c428e6e Trigger workflows 2026-10-15 11:39:58 +01:00
github-actions[bot]
444333376e Update changelog for v4.39.0 2026-10-15 10:34:02 +00:00
Michael B. Gale
e5b217aeb5 Merge pull request #4238 from github/dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-15 10:26:50 +00:00
Michael B. Gale
d63383a731 Merge pull request #4233 from github/mbg/start-proxy/report-version 
Report release version the proxy is taken from in `start-proxy` telemetry
 2026-10-15 10:15:24 +00:00
Michael B. Gale
8dec0b9f88 Rename path to result in tests 2026-10-15 11:03:10 +01:00
Michael B. Gale
3ec43abae3 Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 2026-10-15 11:01:21 +01:00
Michael B. Gale
4eabea6b5e Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version 2026-10-15 10:31:39 +01:00
Michael B. Gale
57938b8568 Merge pull request #4201 from github/mario-campos/automate-changenotes-assemble 
Incorporate change-notes into CHANGELOG.md at release
 2026-10-15 09:20:41 +00:00
github-actions[bot]
3afe9c01db Rebuild 2026-10-14 21:26:52 +00:00
dependabot[bot]
8844fb33e0 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/setup-node](https://github.com/actions/setup-node) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](043fb46d1a...cf430e030d)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](8207627860...949feb2413)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](3e5f45b2cf...9000827ccb)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 21:24:28 +00:00
Michael B. Gale
c1641847bb Remove explicit authorization header from uploadBundledDatabase 2026-10-14 20:03:19 +01:00
Michael B. Gale
047c751d92 Add a test for uploadBundledDatabase 2026-10-14 20:02:27 +01:00
Michael B. Gale
f6e8dce502 Pass apiDetails to getApiClient in uploadBundledDatabase 2026-10-14 18:28:21 +01:00
Michael B. Gale
a08b587b61 Allow getApiClient to accept GitHubApiDetails 2026-10-14 18:27:15 +01:00
Michael B. Gale
bfe264b559 Add very basic getApiClientWithExternalAuth test 2026-10-14 18:19:52 +01:00
Michael B. Gale
f9b4185b99 Check token value in uploadBundledDatabase 2026-10-14 18:19:52 +01:00
Michael B. Gale
66c96fdc35 Check auth value in getAuthorizationHeaderFor 
Also add some tests for it
 2026-10-14 18:19:52 +01:00
Michael B. Gale
1d30a842cd Guard against blank auth value 
This shouldn't be possible, but was previously handled by the library
 2026-10-14 18:19:51 +01:00
Michael B. Gale
1b0a617641 Make externalRepoAuth check more consistent 2026-10-14 18:19:51 +01:00
Michael B. Gale
96501a33ac Use getCurrentInstance() 2026-10-14 18:19:51 +01:00
Michael B. Gale
a2438139ce Make auth property on GitHubApiDetails optional 2026-10-14 18:19:50 +01:00
Michael B. Gale
e0625309c3 Move GitHubApiDetails to github.ts 2026-10-14 18:19:50 +01:00
Michael B. Gale
61bfcffab9 Add functions to get the current and dotcom instance 2026-10-14 18:19:50 +01:00
Michael B. Gale
102e46e9d1 Move some definitions out of util.ts into a new github.ts module 2026-10-14 18:19:46 +01:00
Michael B. Gale
0735d7910f Improve GitHubApiDetails types and documentation 2026-10-14 18:14:48 +01:00
Michael B. Gale
ee07b503f4 Merge pull request #4236 from github/mbg/add-missing-changenotes 
Add missing change notes for recent PRs
 2026-10-14 15:25:08 +00:00
Michael B. Gale
a897ed5c2e Add change note for #4206 2026-10-14 16:05:40 +01:00
Michael B. Gale
c8bd0195fb Add change note for #4198 2026-10-14 16:03:37 +01:00
Michael B. Gale
c98271eca2 Add change note for #4148 2026-10-14 16:01:09 +01:00
Michael B. Gale
2a3e7563aa Merge pull request #4148 from github/mbg/improve-checkout-path 
Validate `checkout_path` input in `analyze` action
 2026-10-14 14:52:50 +00:00
Michael B. Gale
f460dc7f72 Merge pull request #4206 from github/mbg/set-restore-keys 
Include primary cache keys as restore key
 2026-10-14 14:45:03 +00:00
Michael B. Gale
f5b8e09db2 Merge pull request #4198 from github/mbg/start-proxy/deprecate-fallback 
Use `setup-codeql` logic for finding release assets in `start-proxy`
 2026-10-14 14:39:32 +00:00
Michael B. Gale
28d5dd9818 Revert "Allow logging functions to accept string[] directly" 
This reverts commit 909fda1468.
 2026-10-14 15:07:40 +01:00