Migrate Actions queries to public repo #18321
Merged
+38,197
−48
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
When running codeql test run, the root of the database is not the root of the original repo (the directory containing .github and .git) therefore calls to reusable workflows are not correctly matched.
…cking Problem is that there are StoreSteps that depend on PRHeadCheckout so there is a non-monotic recursion error since PRHeadCheckout depends on TaintTracking module, but this module depends on PRHeadCheckout
Add models for list-files actions
feat: Improve sanitizer checks
Modify UnpinnedActionsTag report node
Improve reusable workflow calls
Cross remote Reusable Workflow analysis
Expect external workflows and actions in .github/workflow/external and .github/actions/external
Fix typo in UnversionedImmutableAction.md
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
There was a problem hiding this comment.
CodeQL found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.
This file not yet fully implemented and does not compile
Failure tracked in github/codeql-team#3655
This reverts commit dba6f0b.
adityasharad
approved these changes
Dec 19, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR adds the sources for the
codeql/actions-queriesquery pack andcodeql/actions-alllibrary pack, as well as the corresponding test pack. The query pack is already in public preview.The only changes from the previously private source code are:
${workspace}now that the dependencies are in the same workspace as the new packs.0.4.0-devto fit with the new repo's versioning process.The commit history is preserved from the original internal repository via a baseless merge.