codeql-action
codeql-action copied to clipboard
GitHub merge queue builds don't report CodeQL status
When running CodeQL on merge_group, it doesn't report the Code scanning results / CodeQL status reported for pull requests. This prevents the use of pull request merge queue when branch protection requires the CodeQL status check.
https://github.com/orgs/community/discussions/46757#discussioncomment-4934046
Thanks for reporting, @auscompgeek! The code scanning team is investigating this. I will update the issue as we know more.
see https://github.com/orgs/community/discussions/46757#discussioncomment-5385231 for workaround to disable codeql on our merge queues for now
👋
@AlonaHlobina is there an ETA for CodeQL to report back to merge queue that it succeeded?
Hi @tlakomy, Unfortunately, there is no ETA for this improvement just yet. I will update the issue as soon as we plan this work.
Hi @AlonaHlobina, We recently started to run into similar issues where an issue occurs when both CodeQL is enabled with MergeQueues, the Code scanning results or CodeQL status reported for pull requests is not available. For now we have disabled the CodeQL checks but would like to have that feature.
This issue has existed for some time now. I've a customer who'd like to see it fixed in an internal ticket.
Note to self: I'll create a follow up ZD ticket for the customer should this one make progress.
The workaround: https://eldrick19.github.io/site/github/tutorial/2023/12/04/enabling-ghas-merge-queue/
This should be considered an important feature since there is no way to select different required checks for the branch protection rules and those required by the merge queue.