mirror of
https://github.com/github/codeql-action.git
synced 2026-04-29 10:28:52 +00:00
Andrew Eisenberg
bcb7fad5b3
Allows us to analyze and then check that certain queries were included in the analysis and others were not.
49 lines
1.1 KiB
YAML
49 lines
1.1 KiB
YAML
name: Expected queries runs
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- releases/v1
|
|
- releases/v2
|
|
pull_request:
|
|
types:
|
|
- opened
|
|
- synchronize
|
|
- reopened
|
|
- ready_for_review
|
|
workflow_dispatch: {}
|
|
|
|
jobs:
|
|
expected-queries:
|
|
timeout-minutes: 45
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Check out repository
|
|
uses: actions/checkout@v3
|
|
- name: Prepare test
|
|
id: prepare-test
|
|
uses: ./.github/prepare-test
|
|
with:
|
|
version: latest
|
|
- uses: ./../action/init
|
|
with:
|
|
languages: javascript
|
|
tools: ${{ steps.prepare-test.outputs.tools-url }}
|
|
- uses: ./../action/analyze
|
|
with:
|
|
output: ${{ runner.temp }}/results
|
|
upload-database: false
|
|
upload: false
|
|
env:
|
|
TEST_MODE: true
|
|
|
|
- name: Check Sarif
|
|
uses: ./../action/.github/check-sarif
|
|
with:
|
|
sarif-file: ${{ runner.temp }}/results/javascript.sarif
|
|
queries-run: js/incomplete-hostname-regexp,js/path-injection
|
|
queries-not-run: foo,bar
|