A web application to visualize and manage open source project data from the Ecosyste.ms API.

github.com/github/codeql-action

Actions for running CodeQL analysis
https://github.com/github/codeql-action

Merge branch 'main' into rvermeulen/uri-errors-as-warnings

a1a585f2ab7dd04c9287080a82625f7d8c1fb05c authored almost 2 years ago
Merge pull request #2488 from github/henrymercer/debug-artifacts-better-logging

Improve logging when preparing and uploading debug artifacts

34666c10b6a7be9d71b1a0ce70d3c0d2a1726d6e authored almost 2 years ago
Improve logging for combined SARIF debug artifact

6e24973d7adf77c81ba32565e7a32243c5f1864f authored almost 2 years ago
Improve logging for debug artifacts

d0a3cf2152cf8cb5726f920a7a258a326526702f authored almost 2 years ago
Improve docs and method naming

78d398ebc6be2d0a1fb3c058f572b35b95ffe13d authored almost 2 years ago
Merge pull request #2486 from github/henrymercer/improve-debug-artifact-robustness

Improve the robustness of creating and uploading debug artifacts

782de452489d3002a30e46325e252dc4bf633090 authored almost 2 years ago
Improve documentation

213bf3678cde6f53de7f63c20061cdf3f47cb65a authored almost 2 years ago
Turn invalid helpUri attribute into a warning

642bbfc83aa68f82e87f527a6e52d23002a83f97 authored almost 2 years ago
Refactoring: Simplify retrieving error message

dd7307d6037eb0057681646ef3068fe22779b39e authored almost 2 years ago
Fall back to partial database bundle if CLI command fails

bbd7c801a0b6c54f8a6e7837e6b87763242aab6e authored almost 2 years ago
Tolerate failures in uploading debug artifacts

80d7a6c8d4c6293bdc9a186d504787a94725a7d8 authored almost 2 years ago
Update checked-in dependencies

6989ba7bd25287394ae19e3c79fa51a61613f05e authored almost 2 years ago
Bump the npm group across 1 directory with 8 updates

Bumps the npm group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --...

1afca056e3b1da63ff3a7d1f7ceab7b372ffd0d8 authored almost 2 years ago
Add changelog note

6cc325341dbc4a12e43e8d6629fce434e7185be3 authored almost 2 years ago
Update default bundle to codeql-bundle-v2.19.0

bbd9c4a63d1876a6056532837fc4a813ed204395 authored almost 2 years ago
Handle CLI errors when creating debug artifacts

d061f2cdd00f958f7237a3359efb9b922c520f9a authored almost 2 years ago
Merge pull request #2481 from rvermeulen/rvermeulen/use-correct-token-for-auth

Use generated token on checkout

5618c9fc1e675841ca52c1c6b1304f5255a905a0 authored almost 2 years ago
Merge pull request #2475 from github/angelapwen/refactor-debug-artifacts-upload

Refactor: prepare debug artifacts for `artifact` upgrades

fe22310da97097bcccbb3569dc655c8567215890 authored almost 2 years ago
Use generated token on checkout

The script `.github/update-release-branch.py` uses the `git` command
to push changes. Therefore ...

762210d5a082a9bf9c7e61975a246fcc808068de authored almost 2 years ago
Merge pull request #2477 from github/fix-incorrect-token-docs

Fix incorrect documentation about the `token` input to the Actions.

c101242d736789021e2d6a69c42eea4845f93159 authored almost 2 years ago
Add a warning to not specify a `token` input in most cases.

86b04fb0e47484f7282357688f21d5d0e32175fe authored almost 2 years ago
Use RFC-style requirements.

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>

51de6a802f1e85a8dce37a0d6a87f660dd50e663 authored almost 2 years ago
Merge pull request #2479 from github/mergeback/v3.26.7-to-main-8214744c

Mergeback v3.26.7 refs/heads/releases/v3 into main

e1d2bc5ddff3115b0f314289fb657729fd551d0a authored almost 2 years ago
Update checked-in dependencies

fa08c064f261322be2f6b5e990626291e87258ea authored almost 2 years ago
Update changelog and version after v3.26.7

d4f57b81db8226b81dba432d8ac8e5d66e999077 authored almost 2 years ago
Merge pull request #2478 from github/update-v3.26.7-4a01ec798

Merge main into releases/v3

8214744c546c1e5c8f03dde8fab3a7353211988d authored almost 2 years ago
Update changelog for v3.26.7

a3b3e07cecabba6fce92183951fcd7152dc3795d authored almost 2 years ago
Fix incorrect documentation about the `token` input to the Actions.

d795ead7df1058d0b0b51dd63677ddd3c7805026 authored almost 2 years ago
Copy SARIF file to database location rather than move

bc660fcf8cf613f1c5867fe4dc996259a5ae61a9 authored almost 2 years ago
Rename `upload-debug-artifacts` to `combined-sarif-artifacts`

More accurately describes what these artifacts are, rather than the step they're uploaded in.

e7716806b801d0410ff0736bb0c28da5778ba6de authored almost 2 years ago
Refactor: move combined SARIF debug artifact logic to `debug-artifact`

cb7faf53f617b745b69da122a66bb14425f7a439 authored almost 2 years ago
Merge pull request #2474 from github/aeisenberg/always-upload-eslint-sarif

Always upload eslint.sarif

4a01ec798636a8442fbe054c7795e139a5960d29 authored almost 2 years ago
Merge pull request #2471 from github/update-bundle/codeql-bundle-v2.18.4

Update default bundle to 2.18.4

762dbaeeb79f3e01fe9f52f151cb17042dab7c84 authored almost 2 years ago
Use `.push` rather than `.concat`

d4bfd4051319fc1685629e50c0cd9647dc4cf26c authored almost 2 years ago
Remove unused helper file

82ce3131fa65b23f3c03925a4ed8f5b23c40895c authored almost 2 years ago
Rebuild: add transpiled files

4ba244037ad9b9d6675bf100b736dfe73a771b2a authored almost 2 years ago
Only upload `upload-sarif` debug artifacts at most once

Previously, we uploaded combined SARIF artifacts in both the `analyze-post` and `upload-sarif-po...

c098b253f67fa4b78e43bd654fb9c108e8504148 authored almost 2 years ago
Refactor: upload all available debug artifacts in init-post

Previously, we uploaded SARIF artifacts in the `analyze-post` step and database and log artifact...

b296f2676c59e1cadc443ea4d3ed387d4f4e59a2 authored almost 2 years ago
Always upload eslint.sarif

0d0f998f2891417c3609fda383e08753d605c77e authored almost 2 years ago
Merge pull request #2469 from github/aeisenberg/upload-eslint-sarif

Upload sarif for eslint results

e817992b3db357f199b6e99216d3bf853dafd0fc authored almost 2 years ago
Merge pull request #2472 from rvermeulen/rvermeulen/update-release-branch-authz

Address authentication issue release branch update

49021ad7f5a68089739ccf2e66e25b7e531c6bcf authored almost 2 years ago
Merge branch 'main' into rvermeulen/update-release-branch-authz

f824adbf9bf63ebfa2c4278e0637d65d20b4ddbb authored almost 2 years ago
Add changelog note

8d9ed0b40e24a3209eda0edca170ba215148ed22 authored almost 2 years ago
Update default bundle to codeql-bundle-v2.18.4

2a9bba1c357c8248031bce5ae1d3e47e3e723e30 authored almost 2 years ago
Ignore suppressed alerts

56b841888472b4f479ef3b9c0643f73434756177 authored almost 2 years ago
Merge branch 'main' into aeisenberg/upload-eslint-sarif

5c9d95388fe1cf336cb296ca21db2349ff47c0a8 authored almost 2 years ago
Merge pull request #2470 from github/aeisenberg/update-setup-swift

Update setup-swift version

8fd294e26a0e458834582b0fe4988d79966c7c0a authored almost 2 years ago
Update setup-swift version

Allows running swift v5.10.1.

c00e2392d27ffe95f60f14b747d9b821f119a233 authored almost 2 years ago
Upload sarif for eslint results

55c72b9aa6d6a244f0650809d26e362bcb0782d6 authored almost 2 years ago
Merge pull request #2455 from github/mbg/go/1.23

Go: Bump Go version to 1.23 in tests

d8b1697e9a833a1f8cd88c642a6bd8685d3ee856 authored almost 2 years ago
Merge pull request #2464 from github/henrymercer/tools-url-status-report

Add standard tools URLs to status report

9b41ced437d4a4f34bf0b740f80b4e52d3c4bccd authored almost 2 years ago
Add standard tools URLs to status report

0aafba91ba7e0c3abbe14fab22afd2a796c055a1 authored almost 2 years ago
Merge pull request #2463 from github/henrymercer/job-uuid-in-sarif

Add job run UUID to SARIF output

ad5c6086fdc9e182315a158c7f96eb0c66061dab authored almost 2 years ago
Merge pull request #2462 from github/henrymercer/fix-ghes-table

Fix formatting issue with GHES compatibility table

3b0aa30bb7efa60d6038d078e0d00dd0787392be authored almost 2 years ago
Add PR check for job run UUID

90cf3d26a7ee3440e4c2a0b3149b9f2468d1dc8d authored almost 2 years ago
Add job run UUID to SARIF output

de6fe7e20a10ea39245a5c1335a580bcd98f28ac authored almost 2 years ago
Fix formatting issue with GHES compatibility table

Also add a note about GHES 3.11 supporting but not shipping with CodeQL Action v3.

77f90259991f9686ba6119431b1425995db29010 authored almost 2 years ago
Merge pull request #2451 from github/aeisenberg/recommended

Change "recommended" to "minimum"

889597e41d183636b55d03e1a49c44753c626a2e authored almost 2 years ago
Merge pull request #2450 from paldepind/use-cache-cleanup-flag

Use cache-cleanup command line option

4ac5f37722ebbb686b0f6e75ba2f9dc59ab4a377 authored almost 2 years ago
Merge pull request #2457 from github/dependabot/npm_and_yarn/npm-689a6f074c

Bump the npm group with 3 updates

b4a863192d0be323b0e146ec115c1ecc2a3619e9 authored almost 2 years ago
Update checked-in dependencies

294a6ed044933c65bc157db4c5b05e83d0536866 authored almost 2 years ago
Bump the npm group with 3 updates

Bumps the npm group with 3 updates: [adm-zip](https://github.com/cthackers/adm-zip), [@typescrip...

52df12d45d33efe81608df96b0438f3a023b441a authored almost 2 years ago
Merge branch 'main' into use-cache-cleanup-flag

878047babe9a1e1c94c1452e9008b7595a602126 authored almost 2 years ago
Guard usage of cache-cleanup option by version check

9a16e925c61133ebbbb38a3da479ae327852b175 authored almost 2 years ago
Update README.md

693677d43287bc01e45b199e2ecad8023f445ec4 authored almost 2 years ago
Merge pull request #2442 from github/henrymercer/zstd-bundles

Add support for using zstd-compressed nightly bundles

821ab42c90a42d1d5cd3241930dff56a7c7dcfb2 authored almost 2 years ago
Go: Bump Go version to 1.23

f3f8576a9dfd07ea08d3f791c72a204bdb3fa89d authored almost 2 years ago
Merge pull request #2453 from github/mergeback/v3.26.6-to-main-4dd16135

Mergeback v3.26.6 refs/heads/releases/v3 into main

b43ac1c23f7541b1939bccfc4255db76ae3cd3dd authored almost 2 years ago
Update checked-in dependencies

d9052124279c92a816b41d58326322f89d14afe0 authored almost 2 years ago
Update changelog and version after v3.26.6

8fdccc592113d219f1191714caae23c866aeb258 authored almost 2 years ago
Merge pull request #2452 from github/update-v3.26.6-7233ec5e6

Merge main into releases/v3

4dd16135b69a43b6c8efb853346f8437d92d3c93 authored almost 2 years ago
Update changelog for v3.26.6

dd9dd2d5389e8ca48a8201513c3fd18d7fda567d authored almost 2 years ago
Change "recommended" to "minimum"

The wording was causing confusion.

c28337900b7a01cf3f7f647ab70a49e4964ebc3c authored almost 2 years ago
Use GitHub App for authz

0f99b6310869e031034fa096026b94ac04497d36 authored almost 2 years ago
Use cache-cleanup command line option

The --mode command line option to has been renamed to --cache-cleanup

e4525acbcb7b356d6c3f5ccbac47a12708225465 authored almost 2 years ago
Merge pull request #2449 from github/update-bundle/codeql-bundle-v2.18.3

Update default bundle to 2.18.3

7233ec5e6b313c47141f047dd5be5f957560dd27 authored almost 2 years ago
Add changelog note

a32c44dba17a9c6628320a29508e84e052128a3a authored almost 2 years ago
Update default bundle to codeql-bundle-v2.18.3

2966897c6759237a41ccd8fd392565a4e86a5121 authored almost 2 years ago
Merge pull request #2435 from github/update-supported-enterprise-server-versions

Update supported GitHub Enterprise Server versions

b8efe4dc6ab6d31abe3ec159420d2a4916880800 authored almost 2 years ago
Merge branch 'main' into update-supported-enterprise-server-versions

ab408a875b0616b0e5eaa4d0d86ac836a29cfb4e authored almost 2 years ago
Merge pull request #2443 from github/dbartol/config-file-telemetry

864b979bc3eb6b10501334cb368b2b398a60ff1b authored almost 2 years ago
Merge pull request #2448 from github/dependabot/npm_and_yarn/npm-09b7c43f6b

Bump the npm group with 5 updates

d36c7aaf6a9744943ec1ee06e31a6dd1eb8e1357 authored almost 2 years ago
Update checked-in dependencies

b3bf514df4c04374e8f0db7938b20f8425387f33 authored almost 2 years ago
Bump the npm group with 5 updates

Bumps the npm group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](...

fa428daf9cfc25c7f6eca38dd95cb46b3824da59 authored almost 2 years ago
Merge pull request #2447 from github/dependabot/npm_and_yarn/npm_and_yarn-07a849e1ae

Bump micromatch from 4.0.7 to 4.0.8 in the npm_and_yarn group

a895f2e1b5e62f11af85a45bee736f4e3901a87e authored almost 2 years ago
Merge pull request #2445 from github/mergeback/v3.26.5-to-main-2c779ab0

Mergeback v3.26.5 refs/heads/releases/v3 into main

715faf450af333a3a7d91fb33758ac9b2ec50847 authored almost 2 years ago
Infer compression method from URL

Using the downloaded path is unreliable since we may have removed the file extension.

27dbb1ab2177075a26ee77a40ff815dfb8fabc45 authored almost 2 years ago
Update checked-in dependencies

d9b7453324cbd168281e86075ec77335eed51d2c authored almost 2 years ago
Update changelog and version after v3.26.5

84edb5f4dccd84e0d8e78a79ad91f4e8f21ca194 authored almost 2 years ago
Merge main into releases/v3 (#2444)

* Update changelog and version after v3.26.4

* Update checked-in dependencies

* Only run check...

2c779ab0d087cd7fe7b826087247c2c81f27bfa6 authored almost 2 years ago
Update changelog for v3.26.5

68cd1f9de38ff4e35783f9048745ce4b37ec0c39 authored almost 2 years ago
Fix formatting

276a3bec542f137eb75783bef5bfe3c787e99689 authored almost 2 years ago
Update map file

903fb3489c22362520e01a78bd0474d73f920bfb authored almost 2 years ago
Merge remote-tracking branch 'origin/main' into dbartol/config-file-telemetry

5033d8503b8b574b23b10b5dce8fd73d26c94b5b authored almost 2 years ago
Send config file path to telemetry status report

e885d9d725567ec8a6bc05ea87c9e7d08f83550b authored almost 2 years ago
Support passing local zstd-compressed bundles

379271d2353815580cadcceba6ac5f47fd4a17d8 authored almost 2 years ago
Only run check SIP enablement once in `init` step (#2441)

Co-authored-by: Henry Mercer <henrymercer@github.com>
Co-authored-by: github-actions[bot] <41898...

7e27807413d1c22e8a745f73376d16e782d861da authored almost 2 years ago
Download zstd nightly bundles in PR checks

624030669483b5e24ff061ac57c699aa927220b9 authored almost 2 years ago
Merge pull request #2438 from github/mergeback/v3.26.4-to-main-f0f3afee

Mergeback v3.26.4 refs/heads/releases/v3 into main

fd5fa130e2c632f29b237077157766ea2ef07a13 authored almost 2 years ago
Update checked-in dependencies

6f10eb0e3661ecb831d8e08b7bcd16e6906defe7 authored almost 2 years ago