codeql-action icon indicating copy to clipboard operation
codeql-action copied to clipboard

Actions for running CodeQL analysis

Results 246 codeql-action issues
Sort by recently updated
recently updated
newest added

Scan uses upload-sarif step with a directory called reports. If this directory happens to be empty (no results produced), then the upload step is failing as below: ``` Error: No...

Hi, I'm facing an issue uploading a SARIF file using upload-sarif@v1 on a self-hosted runner. Here is my code (in a composite action) : ``` - name: Scan image id:...

There is a problem with https://github.com/github/codeql-action/blob/main/python-setup/install_tools.sh#L31 where the python setup fails when the runner does not have python2 installed. Expectation is that when python2 is not installed code execution is...

``` Caused by: java.lang.reflect.InaccessibleObjectException: Unable to make public java.net.URI com.sun.tools.javac.api.ClientCodeWrapper$WrappedFileObject.toUri() accessible: module jdk.compiler does not "opens com.sun.tools.javac.api" to unnamed module @3f0ee7cb at java.base/java.lang.reflect.AccessibleObject.checkCanSetAccessible(AccessibleObject.java:354) at java.base/java.lang.reflect.AccessibleObject.checkCanSetAccessible(AccessibleObject.java:297) at java.base/java.lang.reflect.Method.checkCanSetAccessible(Method.java:[199](https://github.com/trask/opentelemetry-java-contrib/runs/5491815918?check_suite_focus=true#step:5:199)) at java.base/java.lang.reflect.Method.setAccessible(Method.java:193) at...

This is what it looks like: > I was very surprised to then be told by GH support that I should file an issue here, instead of contacting support. Perhaps...

Hi @aeisenberg , @adityasharad , As requested here it the workflow run: https://github.com/apache/ofbiz-framework/actions/runs/1470420767 TIA for you help, much appreciated.

question

**Describe the bug** I enabled CodeQL but did not see SAST being recognized when running scorecard in docker: ``` ----------|----------------------------------------------------------------------------------------------------- | 0 / 10 | SAST | SAST tool is...

Code is not detected when built with .NET 6.x (pre-release).

Hi @criemen, I have tried adding /p:UseSharedCompilation=false to the command line of the dotnet build step. Actually I have CSharp .NET 3.1 tried following documentation in order to publish codeql...

codeql-cli v2.7.3 golang v1.17.5 M1 macOS Monterey v12.0.1 I have installed go and added it to the environment variable. I tried adding go environment variables to .zshrc and /etc/paths, but...