-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Actions: Add file coverage information for status page #20371
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
67dc01b
71bac5e
a6fb45b
e7fbd28
526990e
fea0533
1e77891
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,4 @@ | ||
name: "actions" | ||
aliases: [] | ||
display_name: "GitHub Actions" | ||
version: 0.0.1 | ||
column_kind: "utf16" | ||
|
@@ -8,9 +7,11 @@ build_modes: | |
- none | ||
default_queries: | ||
- codeql/actions-queries | ||
file_coverage_languages: [] | ||
# Actions workflows are not reported separately by the GitHub API, so we can't | ||
# associate them with a specific language. | ||
github_api_languages: [] | ||
scc_languages: [] | ||
scc_languages: | ||
- YAML | ||
Comment on lines
+13
to
+14
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I can see that this is now consistent with other languages. What effect does adding this have? There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This tells scc to pick up files marked as YAML when CodeQL scans for the baseline set of files. These are then further filtered down by the configure baseline script. |
||
file_types: | ||
- name: workflow | ||
display_name: GitHub Actions workflow files | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,10 @@ | ||
{ | ||
"paths": [ | ||
".github/workflows/*.yml", | ||
".github/workflows/*.yaml", | ||
".github/reusable_workflows/**/*.yml", | ||
".github/reusable_workflows/**/*.yaml", | ||
"**/action.yml", | ||
"**/action.yaml" | ||
] | ||
} |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,2 @@ | ||
@echo off | ||
type "%CODEQL_EXTRACTOR_ACTIONS_ROOT%\tools\baseline-config.json" |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,3 @@ | ||
#!/bin/sh | ||
|
||
cat "$CODEQL_EXTRACTOR_ACTIONS_ROOT/tools/baseline-config.json" |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
/** | ||
* @id actions/diagnostics/successfully-extracted-files | ||
* @name Extracted files | ||
* @description List all files that were extracted. | ||
* @kind diagnostic | ||
* @tags successfully-extracted-files | ||
*/ | ||
|
||
private import codeql.Locations | ||
|
||
from File f | ||
where exists(f.getRelativePath()) | ||
select f, "" | ||
Comment on lines
+11
to
+13
Check warningCode scanning / CodeQL Consistent alert message Warning
The actions/diagnostics/successfully-extracted-files query does not have the same alert message as cpp, rust, swift.
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
--- | ||
category: minorAnalysis | ||
--- | ||
* Actions analysis now reports file coverage information on the CodeQL status page. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is it worth putting a comment here that
actions
isn't its own language as far as linguist/the API is concerned and therefore not listed?