github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-21 10:11:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,702 Commits 462 Branches 595 Tags
dc00a6f08ff8032331b0e9e5111494d3e94ff596
Commit Graph

3159 Commits

Author SHA1 Message Date
Henry Mercer
dc00a6f08f Improve error message 2026-02-24 16:47:42 +00:00
Henry Mercer
4e71011f44 Add feature flag for more lenient overlay resource checks 2026-02-20 18:26:14 +00:00
Henry Mercer
4191f52110 Address review comments 2026-02-19 17:57:08 +00:00
Henry Mercer
898ae16413 Improve log message 2026-02-17 15:55:15 +00:00
Henry Mercer
fa56ea8dc0 Extract status file path helper 2026-02-17 15:55:13 +00:00
Henry Mercer
05d4e25296 Avoid mutating languages array in overlay status functions 
Use [...languages].sort() instead of languages.sort() to avoid
mutating the caller's array as a side effect.
 2026-02-17 15:55:05 +00:00
Henry Mercer
5c583bbb19 Include diagnostics in bundle 2026-02-17 15:55:02 +00:00
Henry Mercer
3dd1275368 Improve error messages 2026-02-17 15:55:01 +00:00
Henry Mercer
d24014a749 Tweak diagnostic message 2026-02-17 15:55:00 +00:00
Henry Mercer
cc0dce044b Improve diagnostic message wording 2026-02-17 15:55:00 +00:00
Henry Mercer
7b7a951e08 Add status page diagnostic when overlay skipped 2026-02-17 15:54:58 +00:00
Henry Mercer
6c405c2562 Be more explicit about attempt to build overlay DB 2026-02-17 15:54:57 +00:00
Henry Mercer
827bba691f Introduce feature flags for saving and checking status 2026-02-17 15:54:57 +00:00
Henry Mercer
96961e0ee3 Save overlay status to Actions cache 2026-02-17 15:54:53 +00:00
Henry Mercer
ebad062f08 Skip overlay analysis based on cached status 2026-02-17 15:54:31 +00:00
Henry Mercer
d1bdc0ea05 Create separate directory for overlay source code 2026-02-17 15:54:03 +00:00
Michael B. Gale
b1b1e44da9 Merge pull request #3474 from github/mbg/risk-assessment-analysis 
Add `csra` analysis kind
 2026-02-17 15:39:05 +00:00
Michael B. Gale
2abec3f0c3 Replace most occurrences of CSRA 2026-02-17 14:55:31 +00:00
Michael B. Gale
f315d82bd7 Rename csra to risk-assessment 2026-02-17 10:52:04 +00:00
Michael B. Gale
ebce69a4b7 Merge pull request #3485 from github/mbg/java/network-debugging 
Add feature to enable Java network debugging
 2026-02-17 10:19:54 +00:00
Michael B. Gale
d1689c9307 Use all 2026-02-17 09:53:49 +00:00
Michael B. Gale
147d1495e4 Merge pull request #3484 from github/mbg/cli/force-nightly 
Add feature for forcing the `nightly` bundle in `dynamic` workflows
 2026-02-16 22:37:31 +00:00
Michael B. Gale
3e37216660 Merge branch 'main' into mbg/java/network-debugging 2026-02-16 22:02:36 +00:00
Michael B. Gale
aee29a19d7 Merge pull request #3473 from github/mbg/start-proxy/cert-gen 
Improve proxy certificate generation
 2026-02-16 17:19:30 +00:00
Michael B. Gale
f8c75d3f32 Change diagnostic level to note 2026-02-16 17:12:12 +00:00
Michael B. Gale
e315c6fd3b Add diagnostic when a nightly release is forced 2026-02-16 09:29:32 +00:00
Michael B. Gale
8b734d3bc2 Improve variable names and comments 
Also set default `GITHUB_EVENT_NAME` in `setupActionsVars`
 2026-02-16 08:54:19 +00:00
Michael B. Gale
e21e4ca93f Add debugging options to JAVA_TOOL_OPTIONS when FF is enabled 2026-02-15 18:12:51 +00:00
Michael B. Gale
595ce2dc3e Add JavaNetworkDebugging feature 2026-02-15 18:04:48 +00:00
Michael B. Gale
d5f0374a1f Force nightly bundle when FF is enabled 2026-02-15 17:22:20 +00:00
Michael B. Gale
34d43db4c6 Add ForceNightly feature 2026-02-15 16:10:53 +00:00
github-actions[bot]
6bddc7956d Rebuild 2026-02-13 12:01:09 +00:00
Michael B. Gale
9835994414 CSRA category does not need to be adjusted 2026-02-12 20:16:22 +00:00
Michael B. Gale
0ce6420f8e Validate CODEQL_ACTION_CSRA_ASSESSMENT_ID value 2026-02-12 20:15:18 +00:00
Henry Mercer
876cecb383 Avoid requesting features in CCR 2026-02-12 16:53:19 +00:00
Henry Mercer
43b46a19be Retry API authentication errors since these can be transient 2026-02-12 16:19:04 +00:00
Michael B. Gale
4edc7d2e82 Merge pull request #3467 from github/dependabot/npm_and_yarn/npm-minor-5707d09364 
Bump the npm-minor group with 2 updates
 2026-02-12 13:33:11 +00:00
Michael B. Gale
2adcb6464e Add BasePayload type and derive AssessmentPayload from it 2026-02-12 00:13:22 +00:00
Michael B. Gale
da67096c6f Change assessment_id to be a number 2026-02-12 00:10:42 +00:00
Michael B. Gale
c48cd247df Add assessment_id to CSRA payload 2026-02-11 23:56:52 +00:00
Michael B. Gale
0cfcceb4b8 Add transformPayload to AnalysisConfig 2026-02-11 23:56:51 +00:00
Michael B. Gale
6a17f4e258 Update getPrimaryAnalysis* and add test 2026-02-11 22:46:24 +00:00
Michael B. Gale
8cc4d2539b Remove redundant analysis kind check 2026-02-11 22:14:39 +00:00
Michael B. Gale
5132eb53f2 Fix CodeScanning config's sarifPredicate and add test 2026-02-11 22:10:55 +00:00
Michael B. Gale
5b3261bcbf Enforce that only compatible kinds can be enabled concurrently 2026-02-11 20:14:37 +00:00
Michael B. Gale
9267d8d51e Add csra analysis kind 2026-02-11 19:48:06 +00:00
Michael B. Gale
b1d963ed8f Gate updated cert gen behind FF 2026-02-11 19:23:10 +00:00
Michael B. Gale
d636fb3f63 Move certificate code to its own file 2026-02-11 19:23:09 +00:00
Michael B. Gale
d155ebf27f Set more extensions 2026-02-11 19:23:09 +00:00
Michael B. Gale
e8f0116911 Explicitly sign certificate with SHA256 2026-02-11 19:23:09 +00:00