зеркало из https://github.com/github/codeql.git
Workflow: Add paths filter to QL for QL workflow
This commit is contained in:
Родитель
48761b8667
Коммит
d50e3c77e5
|
@ -5,6 +5,14 @@ on:
|
||||||
branches: [main]
|
branches: [main]
|
||||||
pull_request:
|
pull_request:
|
||||||
branches: [main]
|
branches: [main]
|
||||||
|
paths:
|
||||||
|
- "ql/**"
|
||||||
|
- "**.qll"
|
||||||
|
- "**.ql"
|
||||||
|
- "**.dbscheme"
|
||||||
|
- "**/qlpack.yml"
|
||||||
|
- "**/qlpack.yml"
|
||||||
|
- ".github/workflows/ql-for-ql-build.yml"
|
||||||
|
|
||||||
env:
|
env:
|
||||||
CARGO_TERM_COLOR: always
|
CARGO_TERM_COLOR: always
|
||||||
|
@ -54,7 +62,7 @@ jobs:
|
||||||
cp -r ${{ runner.temp }}/queries ${{ runner.temp }}/pack
|
cp -r ${{ runner.temp }}/queries ${{ runner.temp }}/pack
|
||||||
env:
|
env:
|
||||||
CODEQL: ${{ steps.find-codeql.outputs.codeql-path }}
|
CODEQL: ${{ steps.find-codeql.outputs.codeql-path }}
|
||||||
|
|
||||||
### Build the extractor ###
|
### Build the extractor ###
|
||||||
- name: Cache entire extractor
|
- name: Cache entire extractor
|
||||||
if: steps.cache-pack.outputs.cache-hit != 'true'
|
if: steps.cache-pack.outputs.cache-hit != 'true'
|
||||||
|
@ -116,14 +124,14 @@ jobs:
|
||||||
- name: Create CodeQL config file
|
- name: Create CodeQL config file
|
||||||
run: |
|
run: |
|
||||||
echo "paths-ignore:" >> ${CONF}
|
echo "paths-ignore:" >> ${CONF}
|
||||||
echo " - ql/ql/test" >> ${CONF}
|
echo " - ql/ql/test" >> ${CONF}
|
||||||
echo " - \"*/ql/lib/upgrades/\"" >> ${CONF}
|
echo " - \"*/ql/lib/upgrades/\"" >> ${CONF}
|
||||||
echo "disable-default-queries: true" >> ${CONF}
|
echo "disable-default-queries: true" >> ${CONF}
|
||||||
echo "queries:" >> ${CONF}
|
echo "queries:" >> ${CONF}
|
||||||
echo " - uses: ./ql/ql/src/codeql-suites/ql-code-scanning.qls" >> ${CONF}
|
echo " - uses: ./ql/ql/src/codeql-suites/ql-code-scanning.qls" >> ${CONF}
|
||||||
echo "Config file: "
|
echo "Config file: "
|
||||||
cat ${CONF}
|
cat ${CONF}
|
||||||
env:
|
env:
|
||||||
CONF: ./ql-for-ql-config.yml
|
CONF: ./ql-for-ql-config.yml
|
||||||
- name: Initialize CodeQL
|
- name: Initialize CodeQL
|
||||||
uses: github/codeql-action/init@71a8b35ff4c80fcfcd05bc1cd932fe3c08f943ca
|
uses: github/codeql-action/init@71a8b35ff4c80fcfcd05bc1cd932fe3c08f943ca
|
||||||
|
@ -139,13 +147,13 @@ jobs:
|
||||||
|
|
||||||
- name: Perform CodeQL Analysis
|
- name: Perform CodeQL Analysis
|
||||||
uses: github/codeql-action/analyze@71a8b35ff4c80fcfcd05bc1cd932fe3c08f943ca
|
uses: github/codeql-action/analyze@71a8b35ff4c80fcfcd05bc1cd932fe3c08f943ca
|
||||||
with:
|
with:
|
||||||
category: "ql-for-ql"
|
category: "ql-for-ql"
|
||||||
- name: Copy sarif file to CWD
|
- name: Copy sarif file to CWD
|
||||||
run: cp ../results/ql.sarif ./ql-for-ql.sarif
|
run: cp ../results/ql.sarif ./ql-for-ql.sarif
|
||||||
- name: Fixup the $scema in sarif # Until https://github.com/microsoft/sarif-vscode-extension/pull/436/ is part in a stable release
|
- name: Fixup the $scema in sarif # Until https://github.com/microsoft/sarif-vscode-extension/pull/436/ is part in a stable release
|
||||||
run: |
|
run: |
|
||||||
sed -i 's/\$schema.*/\$schema": "https:\/\/raw.githubusercontent.com\/oasis-tcs\/sarif-spec\/master\/Schemata\/sarif-schema-2.1.0",/' ql-for-ql.sarif
|
sed -i 's/\$schema.*/\$schema": "https:\/\/raw.githubusercontent.com\/oasis-tcs\/sarif-spec\/master\/Schemata\/sarif-schema-2.1.0",/' ql-for-ql.sarif
|
||||||
- name: Sarif as artifact
|
- name: Sarif as artifact
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v3
|
||||||
with:
|
with:
|
||||||
|
|
Загрузка…
Ссылка в новой задаче