Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
47 commits
Select commit Hold shift + click to select a range
434df8e
Update checks to use `analysis-kinds` instead of `quality-queries`
mbg Aug 28, 2025
85a4853
Add utility function to check if code scanning is enabled
mbg Aug 28, 2025
ca7dd4a
Move `UploadTarget` definitions to `analyses.ts`
mbg Aug 28, 2025
0162708
Rename `UploadTarget` to `AnalysisConfig`
mbg Aug 28, 2025
cb8f28f
Add `kind` property to `AnalysisConfig` and documentation
mbg Aug 28, 2025
e4ffe6f
Only specify queries for `run-queries` if both analysis kinds are ena…
mbg Aug 28, 2025
ff57bbf
Handle different permutations of analysis kinds in `analyze` action
mbg Aug 28, 2025
6d2d204
Add note for `getPerQueryAlertCounts`
mbg Aug 28, 2025
04bb074
Add `sarifExtension` field to `AnalysisConfig`
mbg Sep 1, 2025
8ea50b8
Add and use helpers for determining analysis config the DB is initial…
mbg Sep 1, 2025
244e04c
Add test with `analysisKindsInput: code-quality`
mbg Sep 1, 2025
811aef8
Move `isDefined` from `start-proxy` to `util`
mbg Sep 1, 2025
01fe6a1
Override query configuration for Code Quality only analyses
mbg Sep 1, 2025
86275f6
Fix `addSarifExtension` and add tests
mbg Sep 1, 2025
7baedbc
Check if Code Scanning is enabled before uploading Code Scanning SARIF
mbg Sep 1, 2025
3ee9287
Update condition and comment for CQ-only config
mbg Sep 2, 2025
51d74ac
Remove default arguments from `uploadSpecifiedFiles` and `validateUni…
mbg Sep 2, 2025
f4fca70
Do not mutate `originalUserInput`
mbg Sep 2, 2025
ae2df70
Make code that builds the list of queries for `run-queries` more robu…
mbg Sep 4, 2025
d08e9a2
Make conditions for `interpret-results` more robust
mbg Sep 4, 2025
38f1a70
Add `runInterpretResultsFor` to de-duplicate code for `interpret-resu…
mbg Sep 4, 2025
4c82ae2
Overlay: add automation ID to cache key
cklin Sep 4, 2025
6d0bcea
Matrix over `analysis-kinds` in `quality-queries` check
mbg Sep 5, 2025
5d822f1
Rename `getDbAnalysisKind` and `getDbAnalysisConfig`
mbg Sep 5, 2025
918e792
Throw an error if query customisations are enabled for a `code-qualit…
mbg Sep 5, 2025
b92db7e
Update changelog and version after v3.30.1
github-actions[bot] Sep 5, 2025
6f2d6bb
Rebuild
github-actions[bot] Sep 5, 2025
aeaa720
Merge pull request #3082 from github/mergeback/v3.30.1-to-main-f1f6e5f6
aibaars Sep 5, 2025
e75b5d3
Fix: Include `matrix.analysis-kinds` in artifact names
mbg Sep 5, 2025
fc58478
Overlay: clarify componentsJson computation
cklin Sep 5, 2025
0a3d60d
Overlay: clarify save vs restore keys
cklin Sep 5, 2025
0e42ed4
build: refresh js files
cklin Sep 5, 2025
ab82675
Add test to check `hasActionsWorkflows` doesn't throw
mbg Sep 5, 2025
e045f5e
Fix `hasActionsWorkflows` throwing if workflows folder doesn't exist
mbg Sep 5, 2025
144880b
Merge pull request #3084 from github/mbg/fix/hasActionsWorkflows
mbg Sep 8, 2025
1c6bc38
Merge pull request #3080 from github/cklin/overlay-db-automation-id
cklin Sep 8, 2025
0a56aad
Merge pull request #3064 from github/mbg/cq/allow-cq-only-analysis
mbg Sep 8, 2025
ec4b36c
Add C# artifacts to `.gitignore` for `multi-language-repo`
mbg Sep 8, 2025
01fd48d
Remove comment about `main` from `update-required-checks.sh`
mbg Sep 8, 2025
76a3ccc
Clarify instructions for updating PR checks for PRs
mbg Sep 8, 2025
7d8e1e9
Bump the npm group with 5 updates
dependabot[bot] Sep 8, 2025
23419de
Rebuild
github-actions[bot] Sep 8, 2025
d8df826
Merge pull request #3086 from github/mbg/docs/required-checks
mbg Sep 8, 2025
c90f074
Merge pull request #3087 from github/dependabot/npm_and_yarn/npm-1cf7…
henrymercer Sep 8, 2025
d7a501d
Merge pull request #3085 from github/mbg/multi-language-repo/gitignore
mbg Sep 9, 2025
a879d03
Update changelog for v3.30.2
github-actions[bot] Sep 9, 2025
14bbb6a
Add changelog entries
mbg Sep 9, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 51 additions & 3 deletions .github/workflows/__quality-queries.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion .github/workflows/__upload-quality-sarif.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

1 change: 0 additions & 1 deletion .github/workflows/script/update-required-checks.sh
Original file line number Diff line number Diff line change
@@ -1,6 +1,5 @@
#!/usr/bin/env bash
# Update the required checks based on the current branch.
# Typically, this will be main.

SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
REPO_DIR="$(dirname "$SCRIPT_DIR")"
Expand Down
5 changes: 5 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,11 @@

See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.

## 3.30.2 - 09 Sep 2025

- Fixed a bug which could cause language autodetection to fail. [#3084](https://github.com/github/codeql-action/pull/3084)
- Experimental: The `quality-queries` input that was added in `3.29.2` as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new `analysis-kinds` input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. [#3064](https://github.com/github/codeql-action/pull/3064)

## 3.30.1 - 05 Sep 2025

- Update default CodeQL bundle version to 2.23.0. [#3077](https://github.com/github/codeql-action/pull/3077)
Expand Down
11 changes: 6 additions & 5 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -60,19 +60,20 @@ Here are a few things you can do that will increase the likelihood of your pull

You can start a release by triggering this workflow via [workflow dispatch](https://github.com/github/codeql-action/actions/workflows/update-release-branch.yml).
1. The workflow run will open a pull request titled "Merge main into releases/v3". Follow the steps on the checklist in the pull request. Once you've checked off all but the last two of these, approve the PR and automerge it.
1. When the "Merge main into releases/v3" pull request is merged into the `releases/v3` branch, a mergeback pull request to `main` will be automatically created. This mergeback pull request incorporates the changelog updates into `main`, tags the release using the merge commit of the "Merge main into releases/v3" pull request, and bumps the patch version of the CodeQL Action.
1. When the "Merge main into releases/v3" pull request is merged into the `releases/v3` branch, a mergeback pull request to `main` will be automatically created. This mergeback pull request incorporates the changelog updates into `main`, tags the release using the merge commit of the "Merge main into releases/v3" pull request, and bumps the patch version of the CodeQL Action.
1. If a backport to an older major version is required, a pull request targeting that version's branch will also be automatically created.
1. Approve the mergeback and backport pull request (if applicable) and automerge them.

Once the mergeback and backport pull request have been merged, the release is complete.

## Keeping the PR checks up to date (admin access required)

Since the `codeql-action` runs most of its testing through individual Actions workflows, there are over two hundred jobs that need to pass in order for a PR to turn green. You can regenerate the checks automatically by running the [update-required-checks.sh](.github/workflows/script/update-required-checks.sh) script:
Since the `codeql-action` runs most of its testing through individual Actions workflows, there are over two hundred required jobs that need to pass in order for a PR to turn green. It would be too tedious to maintain that list manually. You can regenerate the set of required checks automatically by running the [update-required-checks.sh](.github/workflows/script/update-required-checks.sh) script:

1. By default, this script retrieves the checks from the latest SHA on `main`, so make sure that your `main` branch is up to date.
2. Run the script. If there's a reason to, you can pass in a different SHA as a CLI argument.
3. After running, go to the [branch protection rules settings page](https://github.com/github/codeql-action/settings/branches) and validate that the rules for `main`, `v3`, and any other currently supported major versions have been updated.
- If you run the script without an argument, it will retrieve the set of workflows that ran for the latest commit on `main`. Make sure that your local `main` branch is up to date before running the script.
- You can specify a commit SHA as argument to retrieve the set of workflows for that commit instead. You will likely want to use this if you have a PR that removes or adds PR checks.

After running, go to the [branch protection rules settings page](https://github.com/github/codeql-action/settings/branches) and validate that the rules for `main`, `v3`, and any other currently supported major versions have been updated.

Note that any updates to checks on `main` need to be backported to all currently supported major version branches, in order to maintain the same set of names for required checks.

Expand Down
60 changes: 30 additions & 30 deletions lib/analyze-action-post.js

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading