A web application to visualize and manage open source project data from the Ecosyste.ms API.

github.com/github/codeql-action

Actions for running CodeQL analysis
https://github.com/github/codeql-action

Update source so github/no-then passes

cd727934bf46b20ff5c207cf494ad90785f5e404 authored over 5 years ago
Update ESLint configuration

Remove the line to disable the "github/no-then" rule.

35fd0a93b1cee62fff5e45ac7f43d56e2769514e authored over 5 years ago
Merge pull request #320 from github/simon-engledew/fix-DEP0005-buffer

Fix deprecated method Buffer.new

378f1f95d77928be059077e8fb39f1fd2529f45d authored over 5 years ago
Add paths-ignore case

eed314143b740a462716b147b1c1c513f9da022c authored over 5 years ago
Better copy for PathsSpecified, suggested by @sampart

253d46ac976b520816e0e1938e85bb7dc00f6b5c authored over 5 years ago
Markdown is not supported - roll back and fix typo

c5f58f3ee70077c22ded4174a6f33f501e095358 authored over 5 years ago
See if markdown is supported

94b10dbb8f3ab6f1690630baaea99289a9ea706a authored over 5 years ago
Signpost the latest documentation in the warning

85aefe5fa4f3beb201dcdc9f999ea0c4cbefe88a authored over 5 years ago
Fix deprecated method Buffer.new

582f7920893c45588ada2f39b95b0e95c49efa47 authored over 5 years ago
Improve linting hints

8d468d67de21789c1ce4db9322dd6721cf0c0d9d authored over 5 years ago
Update source

c06dcf8fa22ca5bfac25d215406b0349b39f78f8 authored over 5 years ago
Comment the lint cases to make maintaining easier

cb3b3a8cb5568e874763223241cba8159ddfa90a authored over 5 years ago
Tidy up ready for review

92ffb08081077beee563e8a31d41ffbd2ef2a02c authored over 5 years ago
Merge branch 'main' into simon-engledew/lint-workspace

1020df5700d2cd0e5c65b5daefee3ee2141a4546 authored over 5 years ago
Revert an accidental change to make testing quicker

fd16298746aabdf5c3187e177982e1200d0cf07d authored over 5 years ago
Send short codes that do not need URL encoding for better splunk tracing

2ac22e8935f8ecd7150f6b20fcc8b5ac5385e8a6 authored over 5 years ago
Merge pull request #318 from github/api-param-object

Introduce parameter object for API params that travel together

27520b94c4772de154df6534e0690638315cb034 authored over 5 years ago
Make anonymous objects into variables for readability

3ee4739b13ad5881a61bf4e4ec2eab6959af8eb6 authored over 5 years ago
Fix tests

Previously, most tests were using https://github.com and only the first was using https://github...

ab9b1a72dbdafcde357f424395901d0250166c5a authored over 5 years ago
Do not fail if the workflow has been deleted

6df1fc5e38fa8aa13ef89b686e54a3c98d484216 authored over 5 years ago
Workflow triggers are null if unspecified

754f502a84d431c84b94ca3ae67ae8f260fc8e15 authored over 5 years ago
Handle relative workflow paths

c0bd7b0b2b51b47ad375ef33733bf7e2ced163e3 authored over 5 years ago
Write a warning if there is an error with the workflow

33bb87523eb0d0c2c5abf718a632a32fdb36f56f authored over 5 years ago
Add a function that can lint a CodeQL action workflow

7eb9dfcc60beb7afd66384770375ef231d796b1f authored over 5 years ago
Introduce parameter object for API params that travel together

20567b58889661bd1c216e42b7ddd1bcc1d1ab56 authored over 5 years ago
Merge pull request #317 from github/update-v1-b15854c9

Merge main into v1

4dcb3202d856f2dd5e92724dc52eb0b7d063452e authored over 5 years ago
Merge pull request #316 from The-Compiler/patch-1

Make sure a Python 2 pip is installed

b15854c9af596d750147af7b6c8fe872827f0d42 authored over 5 years ago
Make sure a Python 2 pip is installed

In the README of this repo, it's suggested to use the `ubuntu-latest` environment.
That environ...

b168eee469ca25ffe6550995996db6d90b9702b4 authored over 5 years ago
Merge pull request #313 from github/query-binary-planting

Add a query to detect binary planting vulnerabilities.

7589c051a9c1fd827241466495ed7ba6fa5ffedd authored over 5 years ago
Merge branch 'main' into query-binary-planting

f5e028fd83eaf6eb724947d16a92ebce8b255483 authored over 5 years ago
Merge pull request #311 from ericcornelissen/fix-typos

Fix typos in source code, logging, comments, and config files

c4b721114879e017ce4a8b9b329107787042b451 authored over 5 years ago
Merge branch 'main' into fix-typos

6aaf0483f0baa7aacff51db5fae3324f3d031758 authored over 5 years ago
Merge pull request #310 from ericcornelissen/eslint-rule/no-shadow

Update code so "no-shadow" passes

c5d599ecb28884bc8c8398ddcb8ff11be74d73a7 authored over 5 years ago
Merge branch 'main' into fix-typos

6ed5c82bb93acfae478b75c5f2e4e2d0027fce89 authored over 5 years ago
Update spelling for autobuild to auto-built

82ba92f462bfd5a5b88a12a072be51a246d5e6f5 authored over 5 years ago
Merge branch 'main' into eslint-rule/no-shadow

7091b814147b6b9598b10f33a1e7b0afb46bfa20 authored over 5 years ago
Merge pull request #314 from github/skip-integration-tests-prs-from-forks

Skip Runner integration tests on pull requests from forks.

6d232b4ec8bff5488ad653859c4dbf5f41b92ba2 authored over 5 years ago
Merge branch 'main' into skip-integration-tests-prs-from-forks

b59d204bbef3919dfd70273d992a5f324756b6e0 authored over 5 years ago
Merge pull request #312 from ericcornelissen/fix-minor-code-mistakes

Two minor code fixes

0a05e95b524c64d688d8a23c1deb35ed1e553f9f authored over 5 years ago
Skip Runner integration tests on pull requests from forks.

fd36bec497664b82f3975ab528f5dc35ba63a764 authored over 5 years ago
Merge branch 'main' into fix-minor-code-mistakes

a04d948b04015fafa283b4bd7fa88a853e297aaf authored over 5 years ago
Add a query to detect binary planting vulnerabilities.

b03b9fe6416e4e2895c8ef42cf61a1acb4d82171 authored over 5 years ago
Run npm run build

35b050652a1d1a375732aefeddd358c28b7ecd2e authored over 5 years ago
Merge pull request #308 from github/simon-engledew/fast-fail

Abort CodeQL action if the status cannot be reported

31872f129b4249e04bd72f377a8ce641b1c34246 authored over 5 years ago
Run npm run build

5416d4f3b5559118d587a10dc9707cbd68aa7602 authored over 5 years ago
Fix unused sorted value in update-release-branch

Fix a minor issue in the update-release-branch.py script that performs a
call to `sorted` but do...

cf8c79ca353041a5707fdc2050fd00404d57cbe9 authored over 5 years ago
Remove duplicate statement in tracer-config test

The tracer-config.test.js file contained a duplicate of the statement:

process.env["SEMMLE_DE...

4e8634c29c8fb1459f59df26a269d55a1cc03fa5 authored over 5 years ago
Fix typos in Action config files

512c07d9a3c7fee000e3f26b8e0b07b9984b7145 authored over 5 years ago
Fix typos in src

- Rename "toolrunnner" (three 'n') to "toolrunner"
- Rename "relativeFilepaht" to "relativeFilep...

85ea24bd2003323b26695b75118f87006bd8daac authored over 5 years ago
Merge branch 'main' into simon-engledew/fast-fail

6a45994b426563014df80d47b78c307d73eceaf5 authored over 5 years ago
Merge branch 'main' into eslint-rule/no-shadow

992a0cf8f2db4034d16d40c07ccf7ee103972ab0 authored over 5 years ago
Run npm run build

847f4ef2930393fdca308e8125af80f19b033801 authored over 5 years ago
Fix no shadow issues in upload-lib.ts

Rename one instance of "path" to avoid shadowing.

483c94b974034400277379b57e7451990911eeb3 authored over 5 years ago
Fix no shadow issues in fingerprints.ts

Rename various instances of "hash", shadowing the function with that
name.

74559947b1e5cbbb83358532fb57d0e10703569c authored over 5 years ago
Fix no shadow issues in fingerprints.test.ts

Rename shadowing "uri" argument to the more explicit "artifactURI".

ffe94681e4a3d7cd9e5c41e7878e181ff3812b20 authored over 5 years ago
Fix no shadow issues in config-utils.ts

Rename throwaway variable "suite" to "found" when assigned from "find".

Rename local variable "...

2a2910e69391166b94626c7a3535dadf59c773db authored over 5 years ago
Fix no shadow issues in config-utils.test.ts

Rename "queries" variable in test cases to "testQueries" to avoid
shadowing it in a subsequent h...

06e99f15238cc2969bc448909c2190e26694918f authored over 5 years ago
Fix no shadow issues in codeql.ts

Two simple variable renames from "path" to "paths" since the types are
arrays of strings (not ju...

98ad63b24035b586d0945c124ce4efa3e4b5d54e authored over 5 years ago
Fix no shadow issues in api-client.ts

Duplicate use of "_" placeholder argument name. This change may conflict
with #192.

b54c2aab1184a6b0fea371a461ee50af5dc35771 authored over 5 years ago
Update ESLint configuration

Remove the "no-shadow": "off" override and replace it by enabling
"@typescript-eslint/no-shadow"...

22f779c5e6d764077c481d4f9ea2ca1748e55968 authored over 5 years ago
Merge pull request #222 from github/robertbrignull/go_build_trace

Check CODEQL_EXTRACTOR_GO_TRACE and treat Go as a traced language

aafb4575279ac82718958dea31a19823a6a6eacd authored over 5 years ago
Merge branch 'main' into robertbrignull/go_build_trace

0b0bc35050823715d97ad4c9d0b7e490174c239d authored over 5 years ago
Scanning endpoint failures should not halt the scan

eb4226ede4d27aad5e113ed89aecfcefcccee0d0 authored over 5 years ago
Merge remote-tracking branch 'origin/main' into simon-engledew/fast-fail

7fda765d492a89ce2db5f74826412fbff4c3b16d authored over 5 years ago
Merge pull request #309 from github/safe-which

Ensure unqualified program names are present on `PATH` before executing them.

0924fb6b261ce596808d5f994906e15883e8b79a authored over 5 years ago
Fail processing on a 422 as well

Until there is a more robust versioning system it is probably safest to require endpoint compati...

17d4671d6041237becf954a5820be3e743ae7a2c authored over 5 years ago
Implement review feedback

f3ff4c84ba6c293705772ca597e5996089c4a0bd authored over 5 years ago
Ensure unqualified program names are present on `PATH` before executing them.

726cfc8441d7881c8b00604443652a7f57da93ed authored over 5 years ago
Do not run CodeQL if code scanning is not enabled

Put more fine grained logic around which errors we ignore and process.
Re-instate status reporti...

68dedeaa57a571f598eb1fca41a1c599249e047a authored over 5 years ago
Merge pull request #301 from github/robertbrignull/tools_version

Send action ref and tool version in status reports

dc80b016b6074cc2e54b1ec1889c5be289c5f4df authored over 5 years ago
Merge branch 'main' into robertbrignull/tools_version

0d960df08ab47d8b8ad5c358811765ab232e5704 authored over 5 years ago
Merge pull request #231 from github/add-multi-cause-markdown-flag

Enable the CodeQL SARIF multi-cause markdown flag.

10b43b815a6d0e15f925c3456db5e61a232d822a authored over 5 years ago
Merge main into add-multi-cause-markdown-flag.

f94e06a382d084e447264f7d4ba7740615d21fa3 authored over 5 years ago
Merge pull request #306 from github/update-v1-d4eb1e36

Merge main into v1

577fc451dde62362597b51296dafe9898e20a9c5 authored over 5 years ago
Merge pull request #302 from github/robertbrignull/no_tracing

Don't use the word "trace" in log messages

d4eb1e36afae9102c27d09b5254e127c017744d7 authored over 5 years ago
update build command

54c857ce0a38b2d1ba06618d40e2163cce5e5e29 authored over 5 years ago
change voicing

3f2a7abc7b7094cf03b60e8e092b7e45bea03006 authored over 5 years ago
Update init/action.yml

Co-authored-by: Sam Partington <sampart@github.com>

e3a9a7a91cc1e5d92b09845284b4b98f3c5d3381 authored over 5 years ago
Don't use the word "trace" in log messages

4d8912d269ded86989d3718bd1981ccce1b16fa2 authored over 5 years ago
Merge branch 'main' into robertbrignull/go_build_trace

af27146b6410072e7a8b7f806ca3d34aa2fa801c authored over 5 years ago
check if running locally

1737b806ffcd0fdfab68d7a344db0fbb6e919c91 authored over 5 years ago
send action ref and tool version in status reports

80b43ca9d3cf2ae3de17f502283c20e9ea4f10ad authored over 5 years ago
Merge pull request #299 from github/azure_pipelines

Detect Agent.Worker.exe

acacf9bbd571026a7833a255813a317bc941dc4a authored over 5 years ago
Merge branch 'main' into azure_pipelines

9a7b7cb0352b701e5cf7cdf5be745ae9d3bb3cd6 authored over 5 years ago
Merge pull request #298 from github/use-github-action-repository-variable

Make use of the `GITHUB_ACTION_REPOSITORY` environment variable if it is set.

fdb0d486b6afd835804d36dc5237c6eb266506d9 authored over 5 years ago
Merge branch 'main' into use-github-action-repository-variable

241fca876bc1a6fe2bf91417855e0d96961cb4c2 authored over 5 years ago
detect Agent.Worker.exe

aae4713a4d608e890fd2d87570a59af51a3a56ef authored over 5 years ago
Merge pull request #297 from github/rneatherway-patch-1

Change suggested workflow to analyse merge commit

d3285a0ea22ce4bfeb3bcf3101782f56c42c1651 authored over 5 years ago
Make use of the `GITHUB_ACTION_REPOSITORY` environment variable if it is set.

bf30ea69d6c31014c89d39e65c341fbeaa2a2d7b authored over 5 years ago
Change suggested workflow to analyse merge commit

988704e971030d5d57fbe56e952901d787f31852 authored over 5 years ago
Merge pull request #296 from 0xflotus/patch-1

fix: small typo in import-action-entrypoint.ql

409b71a3d08722978c5cb6daf09e475e61693609 authored over 5 years ago
fix: small typo in import-action-entrypoint.ql

1870040facaf352a1f502a3ce248e36314858d4c authored over 5 years ago
Merge pull request #295 from github/main

Update v1 with new CodeQL bundle

1de54f1d3b5ec8ab7d830b288f2fac331462372e authored over 5 years ago
Merge pull request #294 from github/rneatherway/bump-codeql-20201106

Update default CodeQL bundle version

4b301bd34e1e80c3a9f35bb2b7376414a6e23514 authored over 5 years ago
Update default CodeQL bundle version

ab40235d88fac235f62d2e2cf3cba603aac79b00 authored over 5 years ago
Merge pull request #293 from github/update-v1-f13bd452

Merge main into v1

e3bfd25a41f6952b1b04521ba14214fc4de863d3 authored over 5 years ago
Merge pull request #291 from github/simon-engledew/output-codeql-path

Add a codeql-path output to the init action

f13bd452d797f4eac9d9bdc331611d98a248dbee authored over 5 years ago
Remove output from README

As this is an advanced usage it makes more sense to work to getting this included in the documen...

f76124122e73adfc02a4c9b4daf413fb7bdf235f authored over 5 years ago
Expand readme to include codeql-path output example

Also add example from README into workflow to confirm it is accurate.

c87f3021d45bb310d6736f884852a1a3c8093ad7 authored over 5 years ago
Move setOutput into try block in case it errors

54f3e52e8f64042ef67d32bd4dd41b7a640b9b74 authored over 5 years ago