github
/
codeql-action
зеркало из https://github.com/github/codeql-action.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
5 369 коммитов 213 Ветки 417 Теги 239 MiB
Граф коммитов

5369 Коммитов

Автор SHA1 Сообщение Дата
Chuan-kai Lin bbd4e19f51
Revert "Update default bundle to 2.17.4" 2024-05-28 16:02:49 -07:00
Chuan-kai Lin 9ab5d16a3d
Merge pull request #2312 from github/update-bundle/codeql-bundle-v2.17.4 
Update default bundle to 2.17.4
 2024-05-28 16:02:36 -07:00
github-actions[bot] 028346e1ff Add changelog note 2024-05-28 22:21:19 +00:00
github-actions[bot] 5fe08473f8 Update default bundle to codeql-bundle-v2.17.4 2024-05-28 22:21:16 +00:00
Henry Mercer 9550da953d
Merge pull request #2311 from github/henrymercer/pack-missing-auth-config-error 
Add configuration error for missing auth to package registry
 2024-05-28 19:27:27 +01:00
Henry Mercer 6548a4d65c Add configuration error for missing auth to package registry 2024-05-28 19:05:07 +01:00
dependabot[bot] 7927df07e2
Bump micromatch from 4.0.5 to 4.0.7 in the npm group (#2310) 
* Bump micromatch from 4.0.5 to 4.0.7 in the npm group

Bumps the npm group with 1 update: [micromatch](https://github.com/micromatch/micromatch).


Updates `micromatch` from 4.0.5 to 4.0.7
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/micromatch/compare/4.0.5...4.0.7)

---
updated-dependencies:
- dependency-name: micromatch
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update checked-in dependencies

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2024-05-28 01:44:52 -07:00
Henry Mercer 8c4bc43ead
Merge pull request #2296 from github/dbartol/bundle-pr-description 
Update PR description for bundle update PRs
 2024-05-24 15:51:40 +01:00
Henry Mercer 584871bb84
Merge pull request #2306 from github/henrymercer/trap-cache-space-efficiency 
Automatically clean up old TRAP caches
 2024-05-24 15:51:20 +01:00
Henry Mercer f629cb3941 Add some comments to explain test case 2024-05-24 09:48:41 +01:00
Henry Mercer 9983853f46 Add changelog note 2024-05-23 16:30:38 +01:00
Henry Mercer fdba1f907e Improve log message when there's nothing to clean up 2024-05-23 16:27:50 +01:00
Henry Mercer f7f71927cf Add unit test for cleanup 2024-05-23 16:27:50 +01:00
Henry Mercer 6ccd5631d8 Put TRAP cache cleanup behind a feature flag 2024-05-23 16:27:50 +01:00
Henry Mercer 4f2b1826e9 Add telemetry for TRAP cache cleanup 2024-05-23 16:27:50 +01:00
Henry Mercer 59af9fc5ab Add specific error for lacking `actions:write` permission 2024-05-23 16:27:50 +01:00
Henry Mercer 610e72285f Clean up old TRAP caches 2024-05-23 16:27:50 +01:00
Henry Mercer 898dead2d6 Use automatic pagination mapping function 2024-05-23 16:27:50 +01:00
Henry Mercer 1bea17f717 Log key and ref for which we're retrieving caches 2024-05-23 16:27:50 +01:00
Henry Mercer 0b4214972e Invoke cleanup in `analyze` Action 2024-05-23 16:27:50 +01:00
Henry Mercer 4fd6c0d4f1 Look at ref rather than default branch 
Since we'll only cleanup when running on the default branch
 2024-05-23 16:27:50 +01:00
Angela P Wen acdf23828a
Add `steady_state_default_setup` as field to base status report (#2305) 
This will help us distinguish steady-state runs in default setup mode from advanced setup runs and default setup validation/onboarding runs.
 2024-05-22 15:47:59 -07:00
Henry Mercer 087f0b04c6 Restrict TRAP cache cleanup to analyzed language 2024-05-21 22:28:59 +01:00
Henry Mercer cc96c825ba List matching Actions caches 2024-05-21 22:27:49 +01:00
dependabot[bot] b1bd8da5e7
Bump the npm group with 3 updates (#2303) 
* ---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: sinon
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update checked-in dependencies

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2024-05-20 12:17:29 -07:00
Angela P Wen ebd27c09f6
Classify config file and out of disk CLI errors as config errors (#2297) 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2024-05-20 11:03:44 -07:00
Henry Mercer 2c0b69bd1f
Merge branch 'main' into dbartol/bundle-pr-description 2024-05-20 16:56:47 +01:00
Dave Bartolomeo b46ca8cee6
Merge pull request #2301 from github/mergeback/v3.25.6-to-main-9fdb3e49 
Mergeback v3.25.6 refs/heads/releases/v3 into main
 2024-05-20 11:19:51 -04:00
github-actions[bot] 00daf24ffe Update checked-in dependencies 2024-05-20 14:48:50 +00:00
Henry Mercer 3ee86e168e
Merge pull request #2299 from github/angelapwen/fix-pr-checks 
PR Checks: disable tests for Swift on Linux until CLI 2.17.4
 2024-05-20 15:34:15 +01:00
github-actions[bot] b2dad92724 Update changelog and version after v3.25.6 2024-05-20 14:27:31 +00:00
Dave Bartolomeo 9fdb3e4972
Merge pull request #2300 from github/update-v3.25.6-63d519c0a 
Merge main into releases/v3
 2024-05-20 10:26:05 -04:00
github-actions[bot] 00792ab1e0 Update changelog for v3.25.6 2024-05-20 13:52:44 +00:00
Angela P Wen 7c4668115d Also remove old versions from debug artifacts download step 2024-05-17 16:07:47 -07:00
Angela P Wen b0a1d92ae3 PR checks: stop running unset-env on two old CLI versions 
Looks like there was a bug in the oldest two CLI versions, on `macos-12` here.
 2024-05-17 15:47:35 -07:00
Angela P Wen 23c1981a3f PR check: add explicit `setup-go` step to unset-env check 
Go has been removed from the PATH in the most recent Mac runner images rollouts.
 2024-05-17 15:33:51 -07:00
Angela P Wen 46fc2c9526 PR Checks: remove old versions from debug artifacts check 
Now that this check is running on MacOS, it runs into a known issue with the build tracer on ARM Macs that was fixed in CLI v2.15.1.
 2024-05-17 15:16:54 -07:00
Angela P Wen 445165beea PR Checks: disable tests for Swift on Linux until CLI 2.17.4 2024-05-17 15:08:08 -07:00
Dave Bartolomeo 63d519c0ae
Merge pull request #2295 from github/update-bundle/codeql-bundle-v2.17.3 
Update default bundle to 2.17.3
 2024-05-17 12:51:38 -04:00
Henry Mercer 0d9161ca1c
Merge pull request #2293 from github/henrymercer/update-build-mode-autobuild-docs 
Update docs for `build-mode: autobuild`
 2024-05-15 15:48:44 +01:00
Dave Bartolomeo 9a1f461645
Update PR description for bundle update PRs 
Changed from `tools: latest` to `tools: linked` to reflect new usage.
 2024-05-15 10:35:55 -04:00
github-actions[bot] e9e27290e9 Add changelog note 2024-05-15 13:44:54 +00:00
github-actions[bot] de1ac31508 Update default bundle to codeql-bundle-v2.17.3 2024-05-15 13:44:51 +00:00
Koen Vlaswinkel a57c67b895
Merge pull request #2286 from github/koesie10/ghec-dr-db-upload 
Enable database uploads for GHEC-DR
 2024-05-15 14:49:47 +02:00
Henry Mercer b7ef64ecb1
Merge pull request #2294 from github/dependabot/npm_and_yarn/npm-d3285d5234 
Bump the npm group across 1 directory with 4 updates
 2024-05-15 13:48:49 +01:00
github-actions[bot] e54dea297a Update checked-in dependencies 2024-05-15 09:38:11 +00:00
dependabot[bot] 3b42294f03
Bump the npm group across 1 directory with 4 updates 
Bumps the npm group with 4 updates in the / directory: [@octokit/types](https://github.com/octokit/types.ts), [semver](https://github.com/npm/node-semver), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@octokit/types` from 13.4.1 to 13.5.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](https://github.com/octokit/types.ts/compare/v13.4.1...v13.5.0)

Updates `semver` from 7.6.0 to 7.6.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.6.0...v7.6.2)

Updates `@typescript-eslint/eslint-plugin` from 7.8.0 to 7.9.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.9.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 7.8.0 to 7.9.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.9.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@octokit/types"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-15 09:37:09 +00:00
Henry Mercer 9f32769e43 Update docs for `build-mode: autobuild` 
The `autobuild` Action is no longer needed or recommended.
 2024-05-15 09:44:06 +01:00
Koen Vlaswinkel 7fd4900b29
Merge pull request #2292 from github/koesie10/remove-combine-sarif-files-deprecation-warning-ff 
Remove feature flag for combine SARIF files deprecation warning
 2024-05-14 11:43:12 +02:00
Koen Vlaswinkel 931fabe1ef Remove feature flag for combine SARIF files deprecation warning 2024-05-14 11:00:12 +02:00