github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-05-22 22:08:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,559 Commits 374 Branches 549 Tags
f3f52bf568dc44a1069faafa538caa6b1fec40c9
Commit Graph

9559 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale 5283c3ba5a Move getDefaultCliVersion out of GitHubFeatureFlags 
It doesn't need to be in there since it doesn't depend on the API itself and call `getDefaultCliVersionFromFlags` directly
 2026-02-15 15:40:19 +00:00
Michael B. Gale ea1a400e13 Revert "Merge pull request #3476 from github/henrymercer/retry-auth-errors" 
This reverts commit 9658e23e5b, reversing
changes made to 2d6b98c7cf.
 2026-02-15 15:39:04 +00:00
Michael B. Gale 248d7971c2 Remove superfluous try/catch 2026-02-15 15:23:38 +00:00
Michael B. Gale 64940fad4a Use author if they are GitHub staff 2026-02-13 15:10:39 +00:00
Henry Mercer ef618feace Merge pull request #3480 from github/mergeback/v4.32.3-to-main-9e907b5e 
Mergeback v4.32.3 refs/heads/releases/v4 into main
 2026-02-13 12:21:19 +00:00
github-actions[bot] 6bddc7956d Rebuild 2026-02-13 12:01:09 +00:00
github-actions[bot] 01fcdceb89 Update changelog and version after v4.32.3 2026-02-13 11:52:49 +00:00
Henry Mercer 9e907b5e64 Merge pull request #3479 from github/update-v4.32.3-4bf6fa4e2 
Merge main into releases/v4
v4.32.3 		2026-02-13 11:50:53 +00:00
github-actions[bot] 1814c9fbfd Update changelog for v4.32.3 2026-02-13 11:17:52 +00:00
Henry Mercer 4bf6fa4e2d Merge pull request #3478 from github/mbg/changelog/add-connection-test-entry 
Add changelog entry for #3466
 2026-02-13 11:12:32 +00:00
Henry Mercer 9658e23e5b Merge pull request #3476 from github/henrymercer/retry-auth-errors 
Avoid requesting features in CCR
 2026-02-13 11:11:50 +00:00
Michael B. Gale e1933c66bd Find all missing messages in checkExpectedLogMessages 2026-02-12 23:22:33 +00:00
Michael B. Gale edf36092cf Add RecordingLogger that keeps track of groups 2026-02-12 23:21:58 +00:00
Michael B. Gale 15a3d32df0 Extend uploadPayload tests to all analysis kinds 2026-02-12 22:28:27 +00:00
Michael B. Gale 9835994414 CSRA category does not need to be adjusted 2026-02-12 20:16:22 +00:00
Michael B. Gale 0ce6420f8e Validate CODEQL_ACTION_CSRA_ASSESSMENT_ID value 2026-02-12 20:15:18 +00:00
Michael B. Gale be75dd92ea Add changelog entry for #3466 2026-02-12 19:40:23 +00:00
Henry Mercer 05bca54402 Apply suggestion from @Copilot 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-02-12 17:37:10 +00:00
Michael B. Gale 2d6b98c7cf Merge pull request #3475 from github/henrymercer/retry-auth-errors 
Retry API authentication errors since these can be transient
 2026-02-12 17:04:05 +00:00
Henry Mercer 876cecb383 Avoid requesting features in CCR 2026-02-12 16:53:19 +00:00
Henry Mercer 43b46a19be Retry API authentication errors since these can be transient 2026-02-12 16:19:04 +00:00
Michael B. Gale 8ad4b6ec58 Merge pull request #3472 from github/dependabot/github_actions/dot-github/workflows/actions-minor-299c02fd34 
Bump ruby/setup-ruby from 1.286.0 to 1.288.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-02-12 14:00:07 +00:00
Michael B. Gale 4edc7d2e82 Merge pull request #3467 from github/dependabot/npm_and_yarn/npm-minor-5707d09364 
Bump the npm-minor group with 2 updates
 2026-02-12 13:33:11 +00:00
Michael B. Gale 2adcb6464e Add BasePayload type and derive AssessmentPayload from it 2026-02-12 00:13:22 +00:00
Michael B. Gale da67096c6f Change assessment_id to be a number 2026-02-12 00:10:42 +00:00
Michael B. Gale c48cd247df Add assessment_id to CSRA payload 2026-02-11 23:56:52 +00:00
Michael B. Gale 0cfcceb4b8 Add transformPayload to AnalysisConfig 2026-02-11 23:56:51 +00:00
Michael B. Gale cbb92e7ff6 Type the upload payload object 2026-02-11 23:56:51 +00:00
Michael B. Gale db9346285d Add csra case to addSarifExtension test 2026-02-11 23:28:38 +00:00
Michael B. Gale 2de76b6faa Update PR check for csra 2026-02-11 22:46:24 +00:00
Michael B. Gale 6a17f4e258 Update getPrimaryAnalysis* and add test 2026-02-11 22:46:24 +00:00
Michael B. Gale 8cc4d2539b Remove redundant analysis kind check 2026-02-11 22:14:39 +00:00
Michael B. Gale 406bbfcef1 Update upload-lib tests for CSRA 2026-02-11 22:11:17 +00:00
Michael B. Gale 5132eb53f2 Fix CodeScanning config's sarifPredicate and add test 2026-02-11 22:10:55 +00:00
Michael B. Gale 5b3261bcbf Enforce that only compatible kinds can be enabled concurrently 2026-02-11 20:14:37 +00:00
Michael B. Gale 9267d8d51e Add csra analysis kind 2026-02-11 19:48:06 +00:00
Michael B. Gale bc1164e014 Fix typo in test 2026-02-11 19:35:29 +00:00
Michael B. Gale 7801eda177 Add some basic unit tests 2026-02-11 19:23:35 +00:00
Michael B. Gale b1d963ed8f Gate updated cert gen behind FF 2026-02-11 19:23:10 +00:00
Michael B. Gale d636fb3f63 Move certificate code to its own file 2026-02-11 19:23:09 +00:00
Michael B. Gale d155ebf27f Set more extensions 2026-02-11 19:23:09 +00:00
Michael B. Gale e8f0116911 Explicitly sign certificate with SHA256 2026-02-11 19:23:09 +00:00
Michael B. Gale 713a293090 Set keyUsage 2026-02-11 19:23:08 +00:00
Michael B. Gale ff33514494 Merge pull request #3466 from github/mbg/start-proxy/test-connections 
Test connections to private registries in `start-proxy`
 2026-02-11 19:19:02 +00:00
Michael B. Gale efb92e2714 Skip checks for non-URLs for now 2026-02-11 18:02:24 +00:00
github-actions[bot] d73644591f Rebuild 2026-02-11 18:01:35 +00:00
dependabot[bot] 41d2cc39b6 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.286.0 to 1.288.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/90be1154f987f4dc0fe0dd0feedac9e473aa4ba8...09a7688d3b55cf0e976497ff046b70949eeaccfd)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.288.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-11 17:59:56 +00:00
github-actions[bot] be578c7735 Rebuild 2026-02-11 17:54:50 +00:00
dependabot[bot] fa6e24cf12 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `@eslint/compat` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.2/packages/compat)

Updates `eslint-plugin-jsdoc` from 62.4.1 to 62.5.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.4.1...v62.5.0)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-11 17:53:12 +00:00
Michael B. Gale 2b5b614c85 Add timeout event handler 2026-02-11 17:50:44 +00:00