codeql-action icon indicating copy to clipboard operation
codeql-action copied to clipboard

GitHub merge queue builds don't report CodeQL status

Open auscompgeek opened this issue 2 years ago • 10 comments

When running CodeQL on merge_group, it doesn't report the Code scanning results / CodeQL status reported for pull requests. This prevents the use of pull request merge queue when branch protection requires the CodeQL status check.

https://github.com/orgs/community/discussions/46757#discussioncomment-4934046

auscompgeek avatar Feb 11 '23 00:02 auscompgeek

Thanks for reporting, @auscompgeek! The code scanning team is investigating this. I will update the issue as we know more.

AlonaHlobina avatar Feb 13 '23 15:02 AlonaHlobina

see https://github.com/orgs/community/discussions/46757#discussioncomment-5385231 for workaround to disable codeql on our merge queues for now

pokey avatar Mar 21 '23 19:03 pokey

👋

@AlonaHlobina is there an ETA for CodeQL to report back to merge queue that it succeeded?

tlakomy avatar May 30 '23 13:05 tlakomy

Hi @tlakomy, Unfortunately, there is no ETA for this improvement just yet. I will update the issue as soon as we plan this work.

AlonaHlobina avatar Jun 01 '23 12:06 AlonaHlobina

Hi @AlonaHlobina, We recently started to run into similar issues where an issue occurs when both CodeQL is enabled with MergeQueues, the Code scanning results or CodeQL status reported for pull requests is not available. For now we have disabled the CodeQL checks but would like to have that feature.

sayaliM0412 avatar Nov 02 '23 15:11 sayaliM0412

This issue has existed for some time now. I've a customer who'd like to see it fixed in an internal ticket.

Note to self: I'll create a follow up ZD ticket for the customer should this one make progress.

gm3dmo avatar Jan 23 '24 10:01 gm3dmo

The workaround: https://eldrick19.github.io/site/github/tutorial/2023/12/04/enabling-ghas-merge-queue/

AlonaHlobina avatar Jan 23 '24 10:01 AlonaHlobina

This should be considered an important feature since there is no way to select different required checks for the branch protection rules and those required by the merge queue.

lawaladekunle avatar Apr 25 '24 13:04 lawaladekunle