A web application to visualize and manage open source project data from the Ecosyste.ms API.

github.com/github/codeql-action

Actions for running CodeQL analysis
https://github.com/github/codeql-action

Update changelog and version after v2.2.9

32daed70e7e0f9412ef7043bf4cb1325d0f55de2 authored over 3 years ago
Merge pull request #1608 from github/update-v2.2.9-fb32c3fef

Merge main into releases/v2

04df1262e6247151b5ac09cd2c303ac36ad3f62b authored over 3 years ago
Move changelog note to correct section

f0988cbd79ff403435044fdb9947c1ec20d01f6a authored over 3 years ago
Update changelog for v2.2.9

fef20d6c357cfcd261d53a2d55b0b2132d0f6892 authored over 3 years ago
Merge pull request #1605 from github/henrymercer/diagnostics-grouping-workaround

Work around duplicate locations bug in diagnostics export

fb32c3fefdc4ffebe80488e4ed5d862348621d72 authored over 3 years ago
Just check the number of locations

Only tests the property we are looking for and avoids problems with
different cross-platform beha...

329c022f486ae3deced8c256a11365c7a7799041 authored over 3 years ago
Remove duplicate locations from failed run SARIF

c8935d5a9dbe3383438a0f489ca0c6f7fa2743c3 authored over 3 years ago
Remove duplicate locations from output of `database interpret-results`

ade432fd683e818e4efbc4a803160f5b4f13926e authored over 3 years ago
Implement removing duplicate locations from a SARIF file

6f852eeb3899f7918bf6f5d7a201a98a18ce5b51 authored over 3 years ago
Speed up checks a bit by just running the standard suite

097ab4665fecf3c04acc545d74e40d782046c9e3 authored over 3 years ago
Extend diagnostics export integration test to capture location bug

befd804b8b0075fbae00d57bc215f6e0ea6033a5 authored over 3 years ago
Update `upload` input values and logic (#1598)

- The `upload` input to the `analyze` Action now accepts the following values:
- `always` ...

a21bb7f968fa17c120cf60e6f0ec444462b718a2 authored over 3 years ago
Merge pull request #1603 from github/charisk/default-branch-analayzing-override

Add override for code scanning analysis of default branch

0214d1d3784f1108a3844b1863ffe55d41fbf5f8 authored over 3 years ago
Add override for code scanning analysis of default branch

94cc1dea008b4cf7cac2d0552036926c2f5b486f authored over 3 years ago
Merge pull request #1602 from github/mergeback/v2.2.8-to-main-67a35a08

Mergeback v2.2.8 refs/heads/releases/v2 into main

04f256d7e28cbcf654adcdc590eb45e225e35757 authored over 3 years ago
Update checked-in dependencies

0b08c9f2ff4273461112b6d759fb5e9e33587e69 authored over 3 years ago
Update changelog and version after v2.2.8

1196b1ac0ced0adf597e2a38a506db84a603a549 authored over 3 years ago
Merge pull request #1601 from github/update-v2.2.8-066b6343e

Merge main into releases/v2

67a35a08586135a9573f4327e904ecbf517a882d authored over 3 years ago
Update changelog for v2.2.8

57571ab0cd1646c26245e45072046dd8523c04c5 authored over 3 years ago
Merge pull request #1599 from github/update-supported-enterprise-server-versions

Update supported GitHub Enterprise Server versions.

066b6343ef05c8b9004054f8fb7c6af1a95375aa authored over 3 years ago
Merge pull request #1597 from github/rneatherway/ghe-dotcom

Account for versioning of ghe.com

aefd9896b1ac0a2e24b95525643cfa6d0f5538db authored over 3 years ago
Update supported GitHub Enterprise Server versions.

5f20b2c372e2df4127c0afad236b5e27f7422434 authored over 3 years ago
Bump setup-go from v3 to v4 (#1595)

* Bump actions/setup-go from 3 to 4

Bumps [actions/setup-go](https://github.com/actions/setup...

760583e70d47693ffb9619d29cd1b1858c197d2b authored over 3 years ago
Account for versioning of ghe.com

3ca226064378a93b85e71a9b77c6cf4cbb0d6f3d authored over 3 years ago
Merge pull request #1585 from github/henrymercer/bundle-2.12.5

Update default bundle version to 2.12.5

0ef7eda548a9f29902ca2a55e9b9d243bd1223dd authored over 3 years ago
Merge branch 'main' into henrymercer/bundle-2.12.5

86128131faa8ac9b0c4d90915acefa9bc8b30a07 authored over 3 years ago
Merge pull request #1588 from github/update-supported-enterprise-server-versions

Update supported GitHub Enterprise Server versions.

ebbe965b436d3cf08f411a8e9cdefb6cda0170db authored over 3 years ago
Upload per-database diagnostic SARIFs on green and red runs (#1556)

Co-authored-by: Henry Mercer <henry.mercer@me.com>

3cbd063679de986b9483989a15aa6c021d2202c9 authored over 3 years ago
Bump typescript from 4.9.4 to 5.0.2 (#1592)

* Bump typescript from 4.9.4 to 5.0.2

Bumps [typescript](https://github.com/Microsoft/TypeScr...

b4fba292aa71cf974c3365895ab9620cae5dff8c authored over 3 years ago
Bump actions/setup-go from 3 to 4 (#1593)

* Bump actions/setup-go from 3 to 4

Bumps [actions/setup-go](https://github.com/actions/setup...

b55762b0a6eec7461e904e9810406d8cf949f892 authored over 3 years ago
Bump peter-evans/create-pull-request from 4.2.3 to 4.2.4 (#1594)

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from...

91fb7b5c116534d16835167569d866333a9344f1 authored over 3 years ago
fix CI failure - check js

34231cfd525c22db5fc49b98aac4c905d2909439 authored over 3 years ago
Update README.md

f1fb80a041010e1d735235241c4c30a09220fa40 authored over 3 years ago
Update README.md - typo

f81f52702f746be49f664eb3adc71100bd3b1289 authored over 3 years ago
fix linter issues

2f141340f0623f1795dbd8926b101aba3dfb52e0 authored over 3 years ago
update changelog

94786b354b9907840e11ea42f9bdea2b0e576f87 authored over 3 years ago
- Add new configuration Parameter

- Write test to check it is read from configuration
- Update documentation

ee4425224040c4c923225250582676b4d5803f7d authored over 3 years ago
Update supported GitHub Enterprise Server versions.

978bc50f9bef86530a2d125e2acac54b7fbce108 authored over 3 years ago
Merge pull request #1586 from github/henrymercer/enterprise-releases-ignore-classic-version

Ignore classic GHES version when updating supported versions

fb75ebd7508a284201f74f4bbc92dfd6895ae7da authored over 3 years ago
Add a `workflow_dispatch` trigger

a2527628e89be9cc7226fb4513584ea3373d0618 authored over 3 years ago
Ignore classic GHES version when updating supported versions

16b3d998b4236b54989e7c3c6a2f704878bd4095 authored over 3 years ago
Update default bundle version to 2.12.5

98a90dcce78d73245b3bc31661ba78a1ea248217 authored over 3 years ago
Merge pull request #1582 from github/mergeback/v2.2.7-to-main-168b99b3

Mergeback v2.2.7 refs/heads/releases/v2 into main

d23060145bc9131d50558d5d4185494a20208101 authored over 3 years ago
Update checked-in dependencies

bd8fec7f9f145e354ddc854f2636b5ba4cb6eff8 authored over 3 years ago
Update changelog and version after v2.2.7

6a8522e57ec71c5a06c6bd9e849f204c11011a47 authored over 3 years ago
Merge pull request #1581 from github/update-v2.2.7-433fe88bf

Merge main into releases/v2

168b99b3c22180941ae7dbdd5f5c9678ede476ba authored over 3 years ago
Update changelog for v2.2.7

bc7318da918033981b8e3b9cc4c45b61e3428fcd authored over 3 years ago
Merge pull request #1579 from github/aeisenberg/no-upload-database

Avoid uploading databases after integration tests

433fe88bf36ca0c5e4ef9b90a83052d09f7549e5 authored over 3 years ago
Avoid uploading databases after integration tests

We are still getting coverage of the upload capability through the
standard codeql analysis work...

c208575433087202f0e1ff273fe4421edadc0e10 authored over 3 years ago
Merge pull request #1578 from github/henrymercer/fix-circular-dependency

Fix a circular dependency that led a minimum version to be `undefined`

b8ea5872110fb683a0cb7bd3e6838c46c8005797 authored over 3 years ago
Inline minimum version number to avoid circular dependency

65f42e37688e5f0e4e90131436000ace9d4789ae authored over 3 years ago
Add debug logging for feature flag enablement

d9ceda382328683d350a8850c5f74fa19ff7b186 authored over 3 years ago
Bump @ava/typescript from 3.0.1 to 4.0.0 (#1576)

* Bump @ava/typescript from 3.0.1 to 4.0.0

Bumps [@ava/typescript](https://github.com/avajs/t...

19f00dc212364caec77c5ea88fa53cb5deebc752 authored over 3 years ago
Merge pull request #1565 from github/henrymercer/diagnostics-code-scanning-config

Export configuration information to SARIF

ec298233c1785cc41130cf1c87cc5ee90b6dac8f authored over 3 years ago
Prefer `core.info` to `console.log`

a92a14621b7c8519b9c828f2f451076aaa2baf56 authored over 3 years ago
Merge pull request #1571 from github/mergeback/v2.2.6-to-main-16964e90

Mergeback v2.2.6 refs/heads/releases/v2 into main

204eadab9ded3e22323701abf6bac3aaa9147683 authored over 3 years ago
Update checked-in dependencies

0e50a19ce32f527db049d0e02b93d32fdc436e16 authored over 3 years ago
Update changelog and version after v2.2.6

4775eab92e776dc2670aa9e9c43e0cc61def22ad authored over 3 years ago
Merge pull request #1570 from github/update-v2.2.6-e12a2ecd4

Merge main into releases/v2

16964e90ba004cdf0cd845b866b5df21038b7723 authored over 3 years ago
Update changelog for v2.2.6

74cbab49580bd323d93dee5222f0c3fa7b1aa7c4 authored over 3 years ago
Specify SARIF path via env variable

b36480d849da05be3173f7cb96bcbc9d80d7d255 authored over 3 years ago
Merge branch 'main' into henrymercer/diagnostics-code-scanning-config

53f80edaf6ac5b3262910ac91b1e1566eaf3caf2 authored over 3 years ago
Add PR check

b31d983f22ddbba9fa941a374b70a832789bcc27 authored over 3 years ago
Rename `featureEnablement` to `features`

This is more succinct and removes a few line breaks

485cc11a24b5e373617ef4c4ec520d333e79a8d8 authored over 3 years ago
Gate config export behind a feature flag

fc1366f6eca09d8eda397b4702b5c08ac70a485d authored over 3 years ago
Merge pull request #1561 from github/dbartol/bundle-2.12.4

Update bundle to 2.12.4

e12a2ecd4548b74c867cdcc3d229d16892622a01 authored over 3 years ago
Merge branch 'main' into dbartol/bundle-2.12.4

d47d4c804746d10267f154449b910113948f7267 authored over 3 years ago
Merge pull request #1567 from github/aeisenberg/config-parsing-ghes

Add default values to feature flags

f13b180fb88fab31693634cb19e73cb3ed1cb7d8 authored over 3 years ago
Add `security-experimental` to `codeql-config.yml` (#1566)

a3cf96418ef4733dcce99dd1aa190e62f42978bb authored over 3 years ago
Add default values to feature flags

This changes adds default values to feature flags. These default values
will be used whenever th...

0c27d0da4a07a35ccfc8d328af6356c05707d27c authored over 3 years ago
Merge pull request #1564 from github/aeisenberg/qlconfig-file

Fix --qlconfig-file option

e4b846c482eb8fdb860c7c61d2eb64f9bdf79420 authored over 3 years ago
Export configuration information for green runs

4b1f530308d8d0fed2f7a34769bc16792a1edde5 authored over 3 years ago
Export configuration information for red runs

d98eadb536d3be8faca6d558ff6d72dc6aa5a06b authored over 3 years ago
Merge pull request #1563 from github/dependabot/npm_and_yarn/glob-9.2.1

Bump glob from 8.0.1 to 9.2.1

6ef6e50882c658c80f46b3453f468c5315f3fb00 authored over 3 years ago
Fix name of qlconfig file argument

eb40427b008b0874e104d0d25a575f86308ad9da authored over 3 years ago
Fix name of qlconfig file argument

c310f094ddfedccaf8af1c66463136ecc81bc720 authored over 3 years ago
Update checked-in dependencies

7806af304012c87f36bd1cb7946c20dd1cbd299e authored over 3 years ago
Bump glob from 8.0.1 to 9.2.1

Bumps [glob](https://github.com/isaacs/node-glob) from 8.0.1 to 9.2.1.
- [Release notes](https:/...

abf1cea835896904c34ea6ac4f6d4546bc001c51 authored over 3 years ago
Merge branch 'main' into dbartol/bundle-2.12.4

e5ade42937045f7b9255f3bce0605a97a9444032 authored over 3 years ago
Bump `setup-swift` and re-configure dependabot (#1560)

* Update `setup-swift` to v1.22.0

* Configure dependabot to scan `setup-swift` dir

* Add r...

6f079be771282d1f84c5a371e14251ec1b62b57f authored over 3 years ago
Avoid passing an undefined qlconfig arg

100bd7bbef94953be41fddd5afa784161cf2b4c5 authored over 3 years ago
Avoid passing an undefined qlconfig arg

436648542795e1393be76b903aab7adbf364aca4 authored over 3 years ago
Avoid writing `user-config.yaml` file while running tests

8340258886698292fb22c0af4d245df9a86aa982 authored over 3 years ago
Avoid writing `user-config.yaml` file while running tests

a6d3a44519505c57fd42bcc907af45b7776836bb authored over 3 years ago
Update bundle to 2.12.4

5e4af3a25dbf9e3d405e61a841cccbf599c0cdbc authored over 3 years ago
Update bundle to 2.12.4

e812e63bb6e7ce1dc121c16508964650d1eb2dc5 authored over 3 years ago
Merge pull request #1527 from github/aeisenberg/qlconfig-in-cli

Ensure qlconfig file is created when config parsing in cli is on

a589d4087ea22a0a48fc153d1b461886e262e0f2 authored over 3 years ago
Address comments from PR

98d24e562901b34cb37abf5737375f4ebf244636 authored over 3 years ago
Merge pull request #1548 from github/mergeback/v2.2.5-to-main-32dc4993

Mergeback v2.2.5 refs/heads/releases/v2 into main

903be7995357a8419fade3934dea8adb45990a41 authored over 3 years ago
Update checked-in dependencies

18ff14b615fe937e0c8255df1dfd81c9c0d20bba authored over 3 years ago
Merge branch 'main' into mergeback/v2.2.5-to-main-32dc4993

36a249f5aec10189a0a05c856ce72eb46700cf66 authored over 3 years ago
Merge pull request #1549 from github/henrymercer/fix-update-dependencies

Fix workflow to update dependencies

041757fc5924b188a4c73c25f2c3d67545920699 authored over 3 years ago
Merge branch 'main' into aeisenberg/qlconfig-in-cli

8f19113f88ee1a069928e6954a07784d2ada4b6a authored over 3 years ago
Fix workflow to update dependencies

Port over the fix from
https://github.com/github/codeql-action/pull/1544
and share code so these...

cf1855ae373d29880b1ec364f26103902aeaac70 authored over 3 years ago
Update changelog and version after v2.2.5

652709d1b9d8fcee3f27b31c577a978207afe77a authored over 3 years ago
Merge pull request #1547 from github/update-v2.2.5-237a258d2

Merge main into releases/v2

32dc499307d133bb5085bae78498c0ac2cf762d5 authored over 3 years ago
Update changelog for v2.2.5

b742728ac2fdf24c19cef5b5beb54704934fc0e9 authored over 3 years ago
Merge pull request #1543 from github/alexet/update-2.12.3

Update default CodeQL bundle version to 2.12.3

237a258d2b2dcc0e10abc0ba52e79b541372c151 authored over 3 years ago
Fix lib file

5972e6d72e403daf6fd352296998c6a14b8beda2 authored over 3 years ago
Fix bundle versions

164027e6823210502b1a80d5b427fdcacd4595e5 authored over 3 years ago