A web application to visualize and manage open source project data from the Ecosyste.ms API.

github.com/github/codeql-action

Actions for running CodeQL analysis
https://github.com/github/codeql-action

Add `workload_run_attempt` to analysis upload (#1658)

* Refactor status report upload logic

Previously we had duplicated the logic to check `GITHUB...

da583b07a7c587e17604358c799ad8adf110f3e4 authored about 3 years ago
Throw full error for CLI bundle download (#1657)

a9648ea7c684e61497d9a56b7b560a9640298dce authored about 3 years ago
Merge pull request #1656 from github/mergeback/v2.3.0-to-main-b2c19fb9

Mergeback v2.3.0 refs/heads/releases/v2 into main

c5f3f016aedaa90345726465387734d1941bdb3a authored about 3 years ago
Update checked-in dependencies

90f053271ec2d427908d5d8b1448bdcd355bfd62 authored about 3 years ago
Update changelog and version after v2.3.0

0f085f964c8c7e0946c4565866839149bb19b5eb authored about 3 years ago
Merge pull request #1655 from github/update-v2.3.0-a8affb063

Merge main into releases/v2

b2c19fb9a2a485599ccf4ed5d65527d94bc57226 authored about 3 years ago
Update changelog for v2.3.0

b203f98343b5ab42f659c7c3bfc54d0d21b201c3 authored about 3 years ago
Merge pull request #1649 from github/cklin/codeql-cli-2.13.0

Update default CodeQL bundle version to 2.13.0

a8affb06395df1b3b725247becf69d1bf4459333 authored about 3 years ago
Merge branch 'main' into cklin/codeql-cli-2.13.0

b8cc643a2392395df10af662d5199f13de2f6de5 authored about 3 years ago
Merge pull request #1618 from github/henrymercer/remove-legacy-tracing

Remove legacy tracing

7019a9c6fdd76d4db1fd439a831d1f133160ac0b authored about 3 years ago
Merge branch 'main' into henrymercer/remove-legacy-tracing

66f62df188a1b8b79e9740b42a948c68a8b3151f authored about 3 years ago
Merge pull request #1652 from github/henrymercer/fix-bundle-version

Fix the `bundleVersion` field set by the automated bundle update PR

afdf30f3115691166cc85051ca5e0ee04becc2e9 authored about 3 years ago
Autoformat `index.ts`

55a2e709920098505a4e97f7f43ed6be6581573c authored about 3 years ago
Fix bundle version

It's the whole tag, we don't want to remove the `codeql-bundle-` prefix.

1c2f282107790c08e265e1e92475e3df734296cb authored about 3 years ago
add test with config file and input together

47cec7ab017c4335eb7be84e3b09b151ba44e699 authored about 3 years ago
remove space from json string

7b876ae4f4e6d0ebe40fdf4fef9b5ceccbad6209 authored about 3 years ago
fix after review from @henrymercer

f398a65921da753be804136d4fceb86c9881e2ed authored about 3 years ago
Bump swift-actions/setup-swift in /.github/actions/setup-swift (#1650)

Bumps [swift-actions/setup-swift](https://github.com/swift-actions/setup-swift) from 1.22.0 to 1...

9a866ed4524fc3422c3af1e446dab8efa3503411 authored about 3 years ago
Update default CodeQL bundle version to 2.13.0

7867d035914d858d662330443e24a671977c5ba4 authored about 3 years ago
Merge pull request #1648 from github/cklin/update-bundle-trigger

Fix pre-release trigger for update-bundle action

be2b53b5c797426cecc09bfc3edf5e2cc97ddd56 authored about 3 years ago
Fix pre-release trigger for update-bundle action

This PR switches the update-bundle release trigger from `prereleased` to `published` because the...

ae24b75fca1b386dfd88209f2738158b7b02c21b authored about 3 years ago
Merge pull request #1647 from github/mergeback/v2.2.12-to-main-7df0ce34

Mergeback v2.2.12 refs/heads/releases/v2 into main

dc046388f30eacf938aadd32064285f437bd9c04 authored about 3 years ago
Update checked-in dependencies

b4fa971e4014aca67885db251984af4e72829102 authored about 3 years ago
Update changelog and version after v2.2.12

7879209bb2f7341807bc6f062353187856787275 authored about 3 years ago
Merge pull request #1646 from github/update-v2.2.12-d944b3423

Merge main into releases/v2

7df0ce34898d659f95c0c4a09eaa8d4e32ee64db authored about 3 years ago
Update changelog for v2.2.12

fbedecac345b827920c17b4b3488704f4f5bf0b8 authored about 3 years ago
Merge pull request #1619 from github/henrymercer/default-setup-workflow

Allow workflow to be passed via an environment variable for default setup

d944b3423d194ae3a11d1d7291ab2f38eb94207a authored about 3 years ago
Add changelog note

e3210d8ce3ab70ba62248e01804f8ace92086dc3 authored about 3 years ago
Allow passing the workflow via an environment variable

599f4927f24ee8729768e58d8ba4c60b93bc1833 authored about 3 years ago
Merge pull request #1645 from github/henrymercer/remove-dependencies

Remove unused dependencies

ed6c4995fcfc90fa1e870bf955dd15e010cf71e8 authored about 3 years ago
Require xml2js `>=0.5.0` to address CVE-2023-0842

c2b5d643fdc41c9b28b4930ec55e93dbedf6636d authored about 3 years ago
Merge branch 'main' into henrymercer/remove-legacy-tracing

8a093aa1a51cc775c2cd44ee40cdcf70c28f0397 authored about 3 years ago
Remove unused dependencies

9c13316a15486574cee9cd715fe1892201680a31 authored about 3 years ago
Add `workflow_run_attempt` data to status report (#1640)

98f7bbd6102f2c11acb5631e38386a1837dca5a5 authored about 3 years ago
Bump peter-evans/create-pull-request from 4.2.4 to 5.0.0 (#1643)

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from...

d7b9dcdb855b6df190af13376d458258d9dff7ef authored about 3 years ago
remove the documentation about workflow parameters

fc374f5e9a0cad4d42d3c2f67311d608e2eb5f56 authored about 3 years ago
resolve comments from @henrymercer

b4e6f81a72e1e9371ecce0d6ad581b802d6be996 authored about 3 years ago
Update CHANGELOG.md : during PR Review

Co-authored-by: Henry Mercer <henry.mercer@me.com>

0b75f471b179a4beb2c80b395ed55d037babdd1b authored about 3 years ago
Update README.md : during PR Review

Co-authored-by: Henry Mercer <henry.mercer@me.com>

c9f360d9af7632d600fb840bdc8c201e6f3de9cb authored about 3 years ago
Update README.md : during PR Review

Co-authored-by: Henry Mercer <henry.mercer@me.com>

d2950c11f02435a7e5a09e264fde94d3057d12b1 authored about 3 years ago
Update init/action.yml : PR review

Co-authored-by: Henry Mercer <henry.mercer@me.com>

a9fb7d923c0e2516dbb608ac87d9c3cdd12e236d authored about 3 years ago
Accept change in PR

Co-authored-by: Henry Mercer <henry.mercer@me.com>

696504dcab5a3888209a03ee2829ac4ce8544cd4 authored about 3 years ago
Merge branch 'main' into issue-1589-config-param

18f13455eb070a60603cf3ec742dbce92987d63b authored about 3 years ago
Merge pull request #1639 from github/mergeback/v2.2.11-to-main-d186a2a3

Mergeback v2.2.11 refs/heads/releases/v2 into main

988e1bc94181d8b9c03964b72e28974e2dbca322 authored about 3 years ago
Update checked-in dependencies

e12fed6a79bc18db4e0cd32637577fa759eaee6c authored about 3 years ago
Update changelog and version after v2.2.11

ca89579b06824748a577e7fbcfd38afe6cf0da84 authored about 3 years ago
Merge pull request #1638 from github/update-v2.2.11-518b24fea

Merge main into releases/v2

d186a2a36cc67bfa1b860e6170d37fb9634742c7 authored about 3 years ago
Update changelog for v2.2.11

748f83eaabb67135a415fbeb7b80093a6e103783 authored about 3 years ago
Merge pull request #1637 from github/henrymercer/fix-init-exception-reporting

Report exceptions to telemetry in init Action

518b24fea4ba18fbafa1f2be06c594583a0966a8 authored about 3 years ago
Merge branch 'main' into henrymercer/fix-init-exception-reporting

69371ffa95d3dcf49f2d7bc36280b9d65d72fdb9 authored about 3 years ago
Consistently wrap errors

e5c2f32a9f6386408594e3d45f14f4f8e2df4d42 authored about 3 years ago
Merge pull request #1636 from github/henrymercer/re-enable-duplicate-sarif-workaround

Re-enable duplicate SARIF notification location workaround

c28edf06a1d03b8250e56cb8ce4f947a55193f06 authored about 3 years ago
Report exceptions to telemetry in init Action

555b602b2f924c3419b1eec61ad4dd717756318e authored about 3 years ago
Re-enable duplicate SARIF notification location workaround

7193623f40b19441a4b970ec34d09a1130440dbb authored about 3 years ago
Don't expect Swift baseline info on Windows

2058418de98a99f94174cfc64011547c9adc3643 authored over 3 years ago
Set up Swift in unset environment workflow

5da64f56c002c9533f056e98d6e71064a991d027 authored over 3 years ago
Set up Swift in local bundle workflow

322cea6439b96f5c75b979f809dfe972b81c290a authored over 3 years ago
Merge branch 'main' into henrymercer/remove-legacy-tracing

f7a67e4341996ae9c2a4fe3b0671e249138c7af8 authored over 3 years ago
Merge pull request #1635 from github/mergeback/v2.2.10-to-main-8c8d71dd

Mergeback v2.2.10 refs/heads/releases/v2 into main

f32426ba96560beecf71186b24134fb3f613f377 authored over 3 years ago
Update checked-in dependencies

173a94ca3f87f2a4aa454c2f4165dd5b375edeb5 authored over 3 years ago
Update changelog and version after v2.2.10

8efbd5b301592bb041d4178e260fd8985111c11c authored over 3 years ago
Merge pull request #1634 from github/update-v2.2.10-66aeadb4c

Merge main into releases/v2

8c8d71dde4abced210732d8486586914b97752e8 authored over 3 years ago
Update changelog for v2.2.10

d53297ef616868ece747ae21a261cb74e48dbe8a authored over 3 years ago
Merge pull request #1631 from github/henrymercer/duplicate-diagnostics-fixed-in-cli

Skip the SARIF notification object workaround for CLIs that have fixed this bug

66aeadb4c995463a91b7d055358e3325c44e3921 authored over 3 years ago
Merge pull request #1632 from github/aeisenberg/codeql-testing-org

Move to the codeql-testing org

fa7cce4d4be476d3edb355e94da56ebe046b0370 authored over 3 years ago
Move to the codeql-testing org

Refer to the packages in codeql-testing, not in dsp-testing.

2754e104727252b8bfc2b9424a71869535e57b4c authored over 3 years ago
Skip the SARIF notification object workaround for fixed CLIs

3bba073180b15324d1f0a331ed28556bd2845c7f authored over 3 years ago
Merge pull request #1629 from github/alexet/update-2.12.6-2

Update default CodeQL bundle version to 2.12.6

ae0109a77710246fb75fec016fb9eebf87c633ff authored over 3 years ago
Merge pull request #1630 from github/henrymercer/automate-bundle-upgrade

Automate the bundle upgrade

f0a422fa27c6cba8d04c33536a1213579b349b14 authored over 3 years ago
Add a comment about `lib/defaults.json`

98173be3f065603a9854ceb8b82ad75b7eb30bfe authored over 3 years ago
Use `tee` when setting env vars to improve debugging

f6091a09eba90519c3d259e76ff50ae89da82f0c authored over 3 years ago
Explain CLI version marker files

a86046f81791794c6cf0563457a3b108d761935d authored over 3 years ago
Format `.github/actions/update-bundle/index.ts`

33f30874a7811427f0d62b1e3246efd55de05b33 authored over 3 years ago
Update default CodeQL bundle version to 2.12.6

9c869ebf0db22de7dbb86d1581854a12c0a7d16c authored over 3 years ago
rename new parameter from configuration to config

fe4a785361a17a6b17fc9ddbfdcf014b9d49269d authored over 3 years ago
Move internal Actions into `.github/actions`

This is a more standard location for these custom Actions.

e85546cccaefbbc10aed3bcadcda3ea44449a712 authored over 3 years ago
Add workflow to automatically update the bundle

1c0a788663a0650c0556d10697203ce32a0e6d69 authored over 3 years ago
Merge pull request #1626 from github/henrymercer/diagnostics-ghes

Enable diagnostics functionality on GHES

bb28e7e59e2ad6c1e5400e671795b2fa1b2fca6f authored over 3 years ago
Pass negative SARIF include diagnostics flag when feature is disabled

In preparation for enabling this flag by default in the CLI

69aec345f1ba6260a80de5d24622a8fe13e45379 authored over 3 years ago
Enable diagnostics functionality on GHES

29a471393340b6289501bfdbbc34460e25bd43b7 authored over 3 years ago
Simplify matrix

d838bacfbe58b1ca5d8d376e66d7d0a6421f3b17 authored over 3 years ago
Merge pull request #1625 from github/rneatherway/rm-old-checks

Remove checks for triggering on specific paths

dc81ae336830862c46eda3f3aefe6fb65cc21f48 authored over 3 years ago
Improve serialization of Swift environment variable if expression

72d018e2674829b5718dc7a31b5f95029d408180 authored over 3 years ago
Fix bundle version comments

9975b733f4caeb92c7310cbe71dd8270fe8f31a5 authored over 3 years ago
Merge branch 'main' into henrymercer/remove-legacy-tracing

6cd512160017e1f61f190ccf51e74ecc5f3f8d44 authored over 3 years ago
Remove checks for triggering on specific paths

These are no longer necessary with the new approach to selecting
alerts to show on pull requests.

f6e4cff38adedbe98f416a6d61f3986278e906e2 authored over 3 years ago
Merge pull request #1620 from github/henrymercer/disable-flaky-check

Disable flaky Swift autobuild checks

fff3a80b5bbdd29f1453bf4554afabb83609be14 authored over 3 years ago
Revert "Disable flaky Swift autobuild checks"

This reverts commit ff39eb8d6aee513461d154984c47fb0bc1ce875d.

e42f5e576890b29aad4f6d0e9b2400f2d9fff619 authored over 3 years ago
Disable flaky Swift autobuild checks

ff39eb8d6aee513461d154984c47fb0bc1ce875d authored over 3 years ago
Update CodeQL releases used in PR checks

6ef37003ca46b975211fb3ba6c4795db68417ac9 authored over 3 years ago
Bump minor version number and add changelog note

d13d6833556195f3ab6e9c603c0205a8dda43313 authored over 3 years ago
Delete legacy tracing

d8fe76e16101bf325875f01890dc2b3325c2c13b authored over 3 years ago
Bump minimum version to 2.8.5

4772c1d99f0ad5306aa41d331c20766b1be5c3d9 authored over 3 years ago
Merge pull request #1613 from github/aeisenberg/codeql-testing

Use new location for external queries

f9c159f4fded57bd3c8000e5de554cb90fa0b265 authored over 3 years ago
Use new location for external queries

They have moved from `dsp-testing` to `codeql-testing`.

0af0653ef4c6a666c9d15f3f303cf47d1cc5a47e authored over 3 years ago
Merge pull request #1610 from github/henrymercer/diagnostics-workaround-improvements

Follow-up improvements to the diagnostics workaround

bc0ed6a6c32bbf910d5ab0318455bc43b4014849 authored over 3 years ago
Merge pull request #1609 from github/mergeback/v2.2.9-to-main-04df1262

Mergeback v2.2.9 refs/heads/releases/v2 into main

b0e191ecbcc7376476a57659aeab8624545c7ab8 authored over 3 years ago
Use `Array.isArray`

57eca7cbb29c1ed5a3026352e12ebfcd05c55e9a authored over 3 years ago
Wrap reading and writing SARIF files

1e7a38893cdd4679b50398b31feb10560c359901 authored over 3 years ago
Update checked-in dependencies

2deae45400bf139ca92d2f108d6d14959cdafe30 authored over 3 years ago