114 строки
5.3 KiB
JavaScript
114 строки
5.3 KiB
JavaScript
"use strict";
|
|
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
if (k2 === undefined) k2 = k;
|
|
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
}
|
|
Object.defineProperty(o, k2, desc);
|
|
}) : (function(o, m, k, k2) {
|
|
if (k2 === undefined) k2 = k;
|
|
o[k2] = m[k];
|
|
}));
|
|
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
}) : function(o, v) {
|
|
o["default"] = v;
|
|
});
|
|
var __importStar = (this && this.__importStar) || function (mod) {
|
|
if (mod && mod.__esModule) return mod;
|
|
var result = {};
|
|
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
__setModuleDefault(result, mod);
|
|
return result;
|
|
};
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.isSipEnabled = exports.checkInstallPython311 = exports.printPathFiltersWarning = exports.runInit = exports.initConfig = exports.initCodeQL = void 0;
|
|
const fs = __importStar(require("fs"));
|
|
const path = __importStar(require("path"));
|
|
const exec = __importStar(require("@actions/exec/lib/exec"));
|
|
const toolrunner = __importStar(require("@actions/exec/lib/toolrunner"));
|
|
const safeWhich = __importStar(require("@chrisgavin/safe-which"));
|
|
const codeql_1 = require("./codeql");
|
|
const configUtils = __importStar(require("./config-utils"));
|
|
const languages_1 = require("./languages");
|
|
const tools_features_1 = require("./tools-features");
|
|
const tracer_config_1 = require("./tracer-config");
|
|
async function initCodeQL(toolsInput, apiDetails, tempDir, variant, defaultCliVersion, logger) {
|
|
logger.startGroup("Setup CodeQL tools");
|
|
const { codeql, toolsDownloadDurationMs, toolsSource, toolsVersion } = await (0, codeql_1.setupCodeQL)(toolsInput, apiDetails, tempDir, variant, defaultCliVersion, logger, true);
|
|
await codeql.printVersion();
|
|
logger.endGroup();
|
|
return { codeql, toolsDownloadDurationMs, toolsSource, toolsVersion };
|
|
}
|
|
exports.initCodeQL = initCodeQL;
|
|
async function initConfig(inputs, codeql) {
|
|
const logger = inputs.logger;
|
|
logger.startGroup("Load language configuration");
|
|
const config = await configUtils.initConfig(inputs);
|
|
if (!(await codeql.supportsFeature(tools_features_1.ToolsFeature.InformsAboutUnsupportedPathFilters))) {
|
|
printPathFiltersWarning(config, logger);
|
|
}
|
|
logger.endGroup();
|
|
return config;
|
|
}
|
|
exports.initConfig = initConfig;
|
|
async function runInit(codeql, config, sourceRoot, processName, registriesInput, apiDetails, features, logger) {
|
|
fs.mkdirSync(config.dbLocation, { recursive: true });
|
|
const { registriesAuthTokens, qlconfigFile } = await configUtils.generateRegistries(registriesInput, config.tempDir, logger);
|
|
await configUtils.wrapEnvironment({
|
|
GITHUB_TOKEN: apiDetails.auth,
|
|
CODEQL_REGISTRIES_AUTH: registriesAuthTokens,
|
|
},
|
|
// Init a database cluster
|
|
async () => await codeql.databaseInitCluster(config, sourceRoot, processName, qlconfigFile, features, logger));
|
|
return await (0, tracer_config_1.getCombinedTracerConfig)(codeql, config, features);
|
|
}
|
|
exports.runInit = runInit;
|
|
function printPathFiltersWarning(config, logger) {
|
|
// Index include/exclude/filters only work in javascript/python/ruby.
|
|
// If any other languages are detected/configured then show a warning.
|
|
if ((config.originalUserInput.paths?.length ||
|
|
config.originalUserInput["paths-ignore"]?.length) &&
|
|
!config.languages.every(languages_1.isScannedLanguage)) {
|
|
logger.warning('The "paths"/"paths-ignore" fields of the config only have effect for JavaScript, Python, and Ruby');
|
|
}
|
|
}
|
|
exports.printPathFiltersWarning = printPathFiltersWarning;
|
|
/**
|
|
* If we are running python 3.12+ on windows, we need to switch to python 3.11.
|
|
* This check happens in a powershell script.
|
|
*/
|
|
async function checkInstallPython311(languages, codeql) {
|
|
if (languages.includes(languages_1.Language.python) &&
|
|
process.platform === "win32" &&
|
|
!(await codeql.getVersion()).features?.supportsPython312) {
|
|
const script = path.resolve(__dirname, "../python-setup", "check_python12.ps1");
|
|
await new toolrunner.ToolRunner(await safeWhich.safeWhich("powershell"), [
|
|
script,
|
|
]).exec();
|
|
}
|
|
}
|
|
exports.checkInstallPython311 = checkInstallPython311;
|
|
// For MacOS runners: runs `csrutil status` to determine whether System
|
|
// Integrity Protection is enabled.
|
|
async function isSipEnabled(logger) {
|
|
try {
|
|
const sipStatusOutput = await exec.getExecOutput("csrutil status");
|
|
if (sipStatusOutput.exitCode === 0) {
|
|
if (sipStatusOutput.stdout.includes("System Integrity Protection status: enabled.")) {
|
|
return true;
|
|
}
|
|
if (sipStatusOutput.stdout.includes("System Integrity Protection status: disabled.")) {
|
|
return false;
|
|
}
|
|
}
|
|
return undefined;
|
|
}
|
|
catch (e) {
|
|
logger.warning(`Failed to determine if System Integrity Protection was enabled: ${e}`);
|
|
return undefined;
|
|
}
|
|
}
|
|
exports.isSipEnabled = isSipEnabled;
|
|
//# sourceMappingURL=init.js.map
|