codeql-action icon indicating copy to clipboard operation
codeql-action copied to clipboard

Actions for running CodeQL analysis

Results 246 codeql-action issues
Sort by recently updated
recently updated
newest added

The docs does not currently include it. https://codeql.github.com/docs/codeql-overview/supported-languages-and-frameworks/

This PR changes the configuration checks we perform when `code-quality` is the only enabled analysis kind to allow `query-filters`. ### Risk assessment For internal use only. Please select the risk...

size/XS

Hi, first of all, thanks for your continued work on GitHub infrastructure including Actions and CodeQL, really great! I just enabled [GitHub Code Quality](https://github.blog/changelog/2025-10-28-github-code-quality-in-public-preview/) in a medium-sized monorepo of ours,...

When diff-informed analysis is performed, PR diff-ranges are currently computed by the `analyze` action. This PR moves computation and persistence of PR diff-ranges to the `init` action instead. The motivation...

size/M

I can't copy `sendUDPResponse` from this alert text 1. Visit https://github.com/PowerDNS/pdns/pull/16363#discussion_r2455671092 2. Select: 3. Copy 4. Paste somewhere #### Actual ``` This expression has no effect (because has no external...

Visit https://github.com/PowerDNS/pdns/pull/16363#discussion_r2455671092 I'd like to be able to link to: But there's no way to do this.

I have recently updated my project to CodeQL v4 action: https://github.com/alexaka1/distroless-dotnet-healthchecks/pull/837 and as part of CI, CodeQL action ran successfully: https://github.com/alexaka1/distroless-dotnet-healthchecks/actions/runs/18435151787?pr=837 However a few days ago all of CodeQL runs...

This PR updates the `init` action to compute a preliminary overlay database mode before the CodeQL CLI becomes available. The preliminary overlay database mode will be used in a future...

This PR changes the `init` action so that, in situations where it would perform overlay analysis from cache, default the CodeQL CLI version to match that from the cached overlay-base...

We get the warning > Warning: Unable to validate code scanning workflow: error: getWorkflow() failed: Error: Expected to find a code scanning workflow file at /home/runner/_work/ProDriver-Safety-Path/ProDriver-Safety-Path/.github/workflows/nightly_codeql.yml, but no such file...