A web application to visualize and manage open source project data from the Ecosyste.ms API.

github.com/github/codeql-action

Actions for running CodeQL analysis
https://github.com/github/codeql-action

Merge pull request #2520 from github/update-supported-enterprise-server-versions

Update supported GitHub Enterprise Server versions

76aafb9ddb97a6ddcfec59a3d4eb65744aba0255 authored almost 2 years ago
Update autobuild/action.yml

bed2a47f201e917459bc40343380c570a730ff06 authored almost 2 years ago
Update readme

3b143d4ee53147b9b8dbfd7cb59596df2701a785 authored almost 2 years ago
Merge pull request #2521 from github/cklin/run-git-command

Misc cleanups on git command invocation

8b333009632bfad20351e1370b2810e7b554011a authored almost 2 years ago
Mergeback v3.26.11 refs/heads/releases/v3 into main (#2523)

* Update changelog for v3.26.11

* Update changelog and version after v3.26.11

* Update checked...

15649f638c7572f80b6cb4e406dca9fe65707b02 authored almost 2 years ago
Update checked-in dependencies

a83506b7c8cb8c54fbd7030c6abdfefb04db3662 authored almost 2 years ago
Update changelog and version after v3.26.11

495ca588a4fb288b9120d4d2e01a74d7dd66e267 authored almost 2 years ago
Merge pull request #2522 from github/update-v3.26.11-8aba5f2c4

Merge main into releases/v3

6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea authored almost 2 years ago
Update changelog for v3.26.11

389647f39867028dcbcca5506b676e29424c612d authored almost 2 years ago
Rename determineMergeBaseCommitOid()

The name suggests that the function computes the merge base, which for
Git means specifically th...

d64cca4b60668dd6561170cecb810a3d23d2ae45 authored almost 2 years ago
Extract runGitCommand()

955d00143d6ac6fbf4e837e0cb1d38978b28ce60 authored almost 2 years ago
Fix new lines in update supported GHES versions PR

01007b842941b0a95baaaddd08b142638e255d9d authored almost 2 years ago
Add a deprecation warning for CodeQL <=2.14.5

15f615c38419745c0b53da32cab72b12e3c583c1 authored almost 2 years ago
Update supported GitHub Enterprise Server versions

35de01e395f3850d49afc230f6dc906de814c99e authored almost 2 years ago
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.1

868284ba01bf9225993116c215f8636aebdc77f4 authored almost 2 years ago
Add changelog note

4beccf73ad93bb068b2049de92505fe7c7fbb923 authored almost 2 years ago
Update default bundle to codeql-bundle-v2.19.1

08bec82e8092c6bc86e5efe49905365c59a5fea6 authored almost 2 years ago
Update checked-in dependencies

f0c7f1d0c078219c78ee711bcd5435694511e3c1 authored almost 2 years ago
Bump the npm group with 3 updates

Bumps the npm group with 3 updates: [@actions/core](https://github.com/actions/toolkit/tree/HEAD...

a66a5fe0e4f17dd7943a1fa9a35a2266226693aa authored almost 2 years ago
Merge pull request #2516 from github/aeisenberg/dependabot-exclude

Exclupde `eslint-plugin-import` updates from dependabot

8aba5f2c426ba0d5c3bb6b4b8fae38035772b3d3 authored almost 2 years ago
Create a GitHub release for each action release

Must make sure this release is not marked as `latest` or else it will
interfere with the CLI bun...

9b4db1efbfc09d6d7d081f0d9d98b0acfc421022 authored almost 2 years ago
Exclupde `eslint-plugin-import` updates from dependabot

See https://github.com/github/codeql-action/pull/2510 for reason why.

ecac2c6d538a5c4520f636d89c01720ddc5c9d1b authored almost 2 years ago
Merge pull request #2514 from github/henrymercer/zstd-better-failure-logging

Capture stderr from extracting Zstandard bundles

e85017e6745c22a328ab20475f48582ec2e1becd authored almost 2 years ago
Add notice for dependency upgrade timeline (#2513)

a60db1d7fffaf34bc97db28f4d16936306e52a7c authored almost 2 years ago
Support YAML in `CODEQL_ACTION_EXTRA_OPTIONS`

7e9defdf1be70a551ad792e7638f0b12375ce379 authored almost 2 years ago
Improve clean up if extraction fails

28db28fc03e5652558cfae2ebfcf112a524358e1 authored almost 2 years ago
Capture stderr from extracting `.tar.zst`

3da852e107a8b010f01b468b4be62250eca45340 authored almost 2 years ago
Merge pull request #2510 from github/dependabot/npm_and_yarn/npm-13baf58ce8

Bump the npm group with 3 updates

c4d433c56218db63e3030b7eb311b4820c0aa24b authored almost 2 years ago
Undo `eslint-plugin-import` bump

This package must stay at 2.29.1 until a version of the
package is released that supports eslint...

2f6cf481fd80327a14c2fccb1f6d2babc76cddc3 authored almost 2 years ago
Add breaking change label to changenote (#2512)

3c13be0632d1e2a15d39da6ede780272c022b84f authored almost 2 years ago
Handle `kind` property in `registries`

6682b14bf47c65c24701656af953295cac7eb18c authored almost 2 years ago
Bump artifact dependencies if `CODEQL_ACTION_ARTIFACT_V2_UPGRADE` enabled (#2482)

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
Co-authored-by: Henry Mercer <henrymerc...

a196a714b8d0d287c2c86f37b12ba3dcd939d879 authored almost 2 years ago
Refactor: Pull out generic tool invocation functionality

1aa7f6f05dfe302471ceb4fd623d2b0ac885417c authored almost 2 years ago
Update checked-in dependencies

931cd264c2b501e2880c8c6bdf912f65a0bb52e6 authored almost 2 years ago
Bump the npm group with 3 updates

Bumps the npm group with 3 updates: [@octokit/types](https://github.com/octokit/types.ts), [@esl...

3fe5410805148037174d313e8ae51053e5581b37 authored almost 2 years ago
Merge pull request #2508 from github/mergeback/v3.26.10-to-main-e2b3eafc

Mergeback v3.26.10 refs/heads/releases/v3 into main

cf5b0a9041d3c1d336516f1944c96d96598193cc authored almost 2 years ago
Update checked-in dependencies

5f2a79b975de42efc1cd554d336409fb69cbe47f authored almost 2 years ago
Update changelog and version after v3.26.10

e3889114a4bbfb997ff86c01921a45371d4ee877 authored almost 2 years ago
Merge pull request #2507 from github/update-v3.26.10-2617ff2d3

Merge main into releases/v3

e2b3eafc8d227b0241d48be5f425d47c2d750a13 authored almost 2 years ago
Update changelog for v3.26.10

7dbbf6d5424ee9117470bd89a28b9b992c935ff4 authored almost 2 years ago
Merge pull request #2502 from github/henrymercer/zstd-experiment

Add a feature flag to use a bundle compressed using Zstandard when setting up the default tools

2617ff2d3f2bf8dd95abadcd289352a4023a4758 authored almost 2 years ago
Add `actions` language

e1763c0db98e37c743c497ad0548da2587862341 authored almost 2 years ago
Add env var alternative to `dependency-caching` input

1338dbce25bf3c40905231d964190224d19f7ff3 authored almost 2 years ago
Merge pull request #2504 from github/mergeback/v3.26.9-to-main-461ef6c7

Mergeback v3.26.9 refs/heads/releases/v3 into main

46e0c78da9edf293aeab3d4d62cf1a7b7534c6a0 authored almost 2 years ago
Update checked-in dependencies

da7be78a1ea4e90acbaa595fcc5606082dba4591 authored almost 2 years ago
Update changelog and version after v3.26.9

ae1c6a2b12389a4d40a3383d49e14518da35a78e authored almost 2 years ago
Merge pull request #2503 from github/update-v3.26.9-f861efb2b

Merge main into releases/v3

461ef6c76dfe95d5c364de2f431ddbd31a417628 authored almost 2 years ago
Update changelog for v3.26.9

00b1146c45021691af6c1c3c45e04d65d3c3f1e8 authored almost 2 years ago
Merge pull request #2498 from github/dependabot/npm_and_yarn/npm-9874b37b58

Bump the npm group with 4 updates

f861efb2b37e018668a6943ba7b408a7083627cc authored almost 2 years ago
Run PR checks using JS only

6b2f7e7c28404627554332e4fe1880c5be10639c authored almost 2 years ago
Use Node script to remove CodeQL cross-platform

af8e2bc4a11a56a9d03b409d7db1225ed272cb18 authored almost 2 years ago
Extract constant for first std-compressed version

bc68dc9d95ed5ebcc679a8f7095815d785e67570 authored almost 2 years ago
Tweak description

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>

67b30f7c39400b01deb01e007e72213c780fe030 authored almost 2 years ago
Run zstd checks against all operating systems

fa91789e8164e315bfac75afbb66a19a6144d3c7 authored almost 2 years ago
Merge pull request #2485 from github/dependabot/github_actions/actions-a88a8c5a24

Bump actions/create-github-app-token from 1.10.3 to 1.11.0 in the actions group

426821d8037e3b86d3806660c6b0c3926f8e95a3 authored almost 2 years ago
Add changelog note

37309b9318b67c73062ba6c6b2c5491d22db77b8 authored almost 2 years ago
Merge branch 'main' into henrymercer/zstd-experiment

20bd6feb0b9cef6650310a3b36c6911fffad4d9b authored almost 2 years ago
Merge pull request #2501 from github/henrymercer/missing-autobuild-config-error

Fix inconsistency in autobuild error tracking

07e813397109ab65b7a34b35817b7d6e7c744249 authored almost 2 years ago
Fix inconsistency in autobuild error tracking

e0a151e64e041db2626a774166ee4f18cfaa921e authored almost 2 years ago
Capture reason if zstd fails unexpectedly

0abc1ec90bf9ff7b842578980c5501bb18f8c6f1 authored almost 2 years ago
revert eslint-plugin-import to 2.29.1

6b0ce4e2741238edebdaf9eda41eff6a31d1442f authored almost 2 years ago
Merge branch 'main' into dependabot/github_actions/actions-a88a8c5a24

07fd497921a761793bd5e42363cdf4a271604343 authored almost 2 years ago
Fall back to gzip if zstd fails

4d015b8cba6339ef74b733c9353dda8d47966b6a authored almost 2 years ago
Check telemetry in PR check to ensure .tar.zst downloaded

662c71aa9ecdbf65aa9e19408ea15d90e172d496 authored almost 2 years ago
Merge pull request #2499 from github/aeisenberg/no-upload-sarif

Avoid uploading eslint sarif for dependabot PR

2cddcb1990ab3bcd0bc078d26775b026e5100f43 authored almost 2 years ago
Don't upload during cancelled jobs

6225a95822b60309e4b8d0ef4c2be093e584d203 authored almost 2 years ago
Determine zstd availability earlier on to simplify log

a7a6a6951eabde6d2bfff296139ebbd60c0dbf78 authored almost 2 years ago
Avoid uploading eslint sarif for dependabot PR

Dependabot does not have `security-events: write` permission.s

9580b7e6d5476eec292e45457c5db7f50ec27866 authored almost 2 years ago
Gate zstd enablement on tar version

db98c27941bb7852211362e5b2eaf6add8695ab8 authored almost 2 years ago
Catch gotcha in PR check workflow generator

990feb59a4e5685bcb837922d3f0e11eabe9bf39 authored almost 2 years ago
Add PR check for zstd bundle

b1ca017eae5e74bf60662cd88dc003dc413033ba authored almost 2 years ago
Use zstd bundle by default when feature flag enabled

ac3fca3e9f1a4235a5e0100661068e5dd42ae6fc authored almost 2 years ago
Bump actions/create-github-app-token in the actions group

Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/acti...

b436a5fca74ec694aa77c4d1ea952dc964ee17fd authored almost 2 years ago
Add feature flag for using zstd bundle

e7309d2b5cc55019db2b319a14be118f1ff55dce authored almost 2 years ago
Update checked-in dependencies

7a2719db0558b893d068d63d647540ecfc5f6acf authored almost 2 years ago
Bump the npm group with 4 updates

Bumps the npm group with 4 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/pack...

65e62c7ee15f74ef85af16917e3a29b473241139 authored almost 2 years ago
Merge pull request #2484 from github/dependabot/npm_and_yarn/npm-f8fb634f66

Bump the npm group across 1 directory with 8 updates

ef130516b13c67496c797d0bfafbc8242d7de345 authored almost 2 years ago
Merge pull request #2497 from github/henrymercer/rebuild-add-new-files

CI: Check in new files when rebuilding

132b18f2f089906ecc6db9f38475698de6cfce0a authored almost 2 years ago
Merge pull request #2496 from github/henrymercer/reduce-pr-check-load

Run some tests against only `latest` and `nightly-latest` CLIs

edf2ee9ac8354e3a42f02d1faefe2a2af562d801 authored almost 2 years ago
Stop tracking `tsconfig.tsbuildinfo`

74e989e9a5722e65b3d6ce3d06088d2ff955d885 authored almost 2 years ago
Check in new files when rebuilding

bff5ba0a535e0adb0a006901de834d4ec61c722d authored almost 2 years ago
Update `tsconfig.tsbuildinfo`

ed5036d7fa4c37474b222f4e32a99996a417638d authored almost 2 years ago
Downgrade `eslint-plugin-import` for now

f9ae1f1149fa827967779657095ed0d8d47e3bef authored almost 2 years ago
s/latest/linked/

b78ab6c6605cdcaa1dc31c3ebaf9da07d3d1cac7 authored almost 2 years ago
Run some tests against only `latest` and `nightly-latest` CLIs

These features have stabilized so it isn't that helpful to test them against the full range of C...

a7b66734ccf6c01643b3c9512a0511e7e5876afd authored almost 2 years ago
Merge pull request #2494 from github/rvermeulen/use-workflow-token

Use workflow token for `update-release-branch.py`

323f5ef653b88011bf10e9a0a56d70d742463c9a authored almost 2 years ago
Merge branch 'main' into rvermeulen/use-workflow-token

a41f61f2b3547fcb4f342312c943597e71c72cb3 authored almost 2 years ago
Use workflow token for `update-release-branch.py`

This explicitly passes the workflow token and restores this to the original invocation.

The s...

7513a95cdc963825d775381a1a0e0f7e3ff98dbd authored almost 2 years ago
Merge pull request #2492 from github/smowton/admin/try-using-app-token-to-backport

Backport workflow: try using the app token

574aaa58126f054bf8ab28c345584774f708584f authored almost 2 years ago
Backport workflow: try using the app token

GITHUB_TOKEN is no longer defined; we should use either the workflow token or the app one. Here ...

3b3a4a69cf63047575ccdec22f1d2e6cb7472659 authored almost 2 years ago
Merge pull request #2491 from github/mergeback/v3.26.8-to-main-294a9d92

Mergeback v3.26.8 refs/heads/releases/v3 into main

799e477cb3a9d4bd3fd1771bf9ffcf3445401cd8 authored almost 2 years ago
Update checked-in dependencies

c38521e7111183db6727914a76fd61363f605c34 authored almost 2 years ago
Update changelog and version after v3.26.8

65efd221e92803a83b4c116a19abb920d2606c2e authored almost 2 years ago
Merge pull request #2490 from github/update-v3.26.8-64431c66d

Merge main into releases/v3

294a9d92911152fe08befb9ec03e240add280cb3 authored almost 2 years ago
Update changelog for v3.26.8

00b3604ce7da856a7d36784715970f8d24a0904b authored almost 2 years ago
Merge pull request #2483 from github/update-bundle/codeql-bundle-v2.19.0

Update default bundle to 2.19.0

64431c66d0e98a26d34f9485e5f8e317e14956fc authored almost 2 years ago
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.0

e0e2d7557dd5c205c43dbdc03c2870c5f7a871a7 authored almost 2 years ago
Add basic Rust support for internal testing

6fc72c19db08367d487486fd15e6958242ef03ce authored almost 2 years ago
Merge pull request #2487 from rvermeulen/rvermeulen/uri-errors-as-warnings

Turn URI errors into warnings

cb28816228ffd4c85f55e62cf398ab8802ffbce8 authored almost 2 years ago
Rebuild JavaScript files

498c508900c1cdbb9de7aa7be9c6dd8a3b27fd1f authored almost 2 years ago