codeql-action

codeql-action copied to clipboard

In https://github.com/github/codeql-action/pull/2741, we added this logic due to an issue with the CLI. The CLI has since been fixed and I think it is cleaner to remove this workaround. I...

marcogario

Default CodeQL action uses Ubuntu Jammy, which has a very old version of Meson

2

I'm targeting a project that is more interested in leading-edge distros than most (https://github.com/a5ehren/gamemode/tree/master) and have restricted the minimum Meson version to 1.3.1 in order to clean out a bunch...

a5ehren

Repo includes Adobe Flash file which cause intelligent firewall to block zipball download by GitHub Actions

2

This repo currently includes an .swf (Adobe Flash) file thanks to one of the NPM packages that is pulled into the node_modules tree: **node-forge**. Located at: node_modules/node-forge/flash At our company,...

tfabraham

This is useful for testing new versions of the proxy before release. ### Merge / deployment checklist - [ ] Confirm this change is backwards compatible with existing workflows. -...

mbg

Evaluation will not finish with CodeQL Bundle v2.21.0

2

Evaluation gets stuck with CodeQL Bundle v2.21.0 when using security-and-quality queries https://github.com/sasobadovinac/FreeCAD/actions/runs/14549227291/job/40818435379 CodeQL Bundle v2.20.7 was working fine https://github.com/sasobadovinac/FreeCAD/actions/runs/14281995311/job/40032617394 Testing CodeQL Bundle v2.21.1 is also not working https://github.com/sasobadovinac/FreeCAD/actions/runs/14615985688/job/41004230514 Testing by...

sasobadovinac

Does not run on Dependabot PRs

3

Hi! I recently started using CodeQL for checking my GitHub Actions via the [Default Setu](https://docs.github.com/en/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning#requirements-for-using-default-setup)p. I also use Dependabot for version management. I noticed on my Dependabot PRs that I...

Sammcb

I figured it would be useful to avoid duplicating this across different extractors that e.g. set `SSL_CERT_FILE` for relevant sub-processes. That's currently done by the C# extractor and looks like...

mbg

## Description This PR adds a module for checking basic system requirements, as listed in https://codeql.github.com/docs/codeql-overview/system-requirements/. ### Merge / deployment checklist - [ ] Confirm this change is backwards compatible...

NlightNFotis

upload-sarif: relative paths beginning with `./` are not handled correctly

2

Hello! I'm reporting what I believe to be a bug in GitHub's SARIF consumption. This bug is probably happening somewhere deeper in GitHub's SARIF consumption machinery but `upload-sarif` is the...

woodruffw

Remove node_modules and compile typescript into minified scripts

7

* [Bundle action using esbuild](https://github.com/github/codeql-action/commit/3dc118c13c28b2804932fce08b479e77e5007079) -- the main change - fixes #2542 * deleted `lib` and `node_modules` * changed `*/action.yml` to use local minified bundled files * minified+bundled: `*/*action.js` +...

jsoref