codeql-action
codeql-action copied to clipboard
Actions for running CodeQL analysis
Scan uses upload-sarif step with a directory called reports. If this directory happens to be empty (no results produced), then the upload step is failing as below: ``` Error: No...
Hi, I'm facing an issue uploading a SARIF file using upload-sarif@v1 on a self-hosted runner. Here is my code (in a composite action) : ``` - name: Scan image id:...
There is a problem with https://github.com/github/codeql-action/blob/main/python-setup/install_tools.sh#L31 where the python setup fails when the runner does not have python2 installed. Expectation is that when python2 is not installed code execution is...
``` Caused by: java.lang.reflect.InaccessibleObjectException: Unable to make public java.net.URI com.sun.tools.javac.api.ClientCodeWrapper$WrappedFileObject.toUri() accessible: module jdk.compiler does not "opens com.sun.tools.javac.api" to unnamed module @3f0ee7cb at java.base/java.lang.reflect.AccessibleObject.checkCanSetAccessible(AccessibleObject.java:354) at java.base/java.lang.reflect.AccessibleObject.checkCanSetAccessible(AccessibleObject.java:297) at java.base/java.lang.reflect.Method.checkCanSetAccessible(Method.java:[199](https://github.com/trask/opentelemetry-java-contrib/runs/5491815918?check_suite_focus=true#step:5:199)) at java.base/java.lang.reflect.Method.setAccessible(Method.java:193) at...
This is what it looks like: > I was very surprised to then be told by GH support that I should file an issue here, instead of contacting support. Perhaps...
Hi @aeisenberg , @adityasharad , As requested here it the workflow run: https://github.com/apache/ofbiz-framework/actions/runs/1470420767 TIA for you help, much appreciated.
**Describe the bug** I enabled CodeQL but did not see SAST being recognized when running scorecard in docker: ``` ----------|----------------------------------------------------------------------------------------------------- | 0 / 10 | SAST | SAST tool is...
Code is not detected when built with .NET 6.x (pre-release).
Hi @criemen, I have tried adding /p:UseSharedCompilation=false to the command line of the dotnet build step. Actually I have CSharp .NET 3.1 tried following documentation in order to publish codeql...
codeql-cli v2.7.3 golang v1.17.5 M1 macOS Monterey v12.0.1 I have installed go and added it to the environment variable. I tried adding go environment variables to .zshrc and /etc/paths, but...