FilesExpand file tree

v4.38.3

/

__config-export.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

100 lines (97 loc) · 3.43 KB

v4.38.3

/

__config-export.yml

Copy path

Top

File metadata and controls

• Code
• Blame

100 lines (97 loc) · 3.43 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

# Warning: This file is generated automatically, and should not be modified.

# Instead, please modify the template in the pr-checks directory and run:

# pr-checks/sync.sh

# to regenerate this file.

name: PR Check - Config export

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

GO111MODULE: auto

on:

push:

branches:

- main

- releases/v*

pull_request: {}

merge_group:

types:

- checks_requested

schedule:

- cron: '0 5 * * *'

workflow_dispatch:

inputs: {}

workflow_call:

inputs: {}

defaults:

run:

shell: bash

concurrency:

cancel-in-progress: ${{ github.event_name == 'pull_request' || false }}

group: config-export-${{github.ref}}

jobs:

config-export:

strategy:

fail-fast: false

matrix:

include:

- os: ubuntu-latest

version: linked

- os: ubuntu-latest

version: nightly-latest

name: Config export

if: github.triggering_actor != 'dependabot[bot]'

permissions:

contents: read

security-events: read

timeout-minutes: 45

runs-on: ${{ matrix.os }}

steps:

- name: Check out repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Prepare test

id: prepare-test

uses: ./.github/actions/prepare-test

with:

version: ${{ matrix.version }}

use-all-platform-bundle: 'false'

setup-kotlin: 'true'

- uses: ./../action/init

with:

languages: javascript

queries: security-extended

tools: ${{ steps.prepare-test.outputs.tools-url }}

- uses: ./../action/analyze

with:

output: '${{ runner.temp }}/results'

upload-database: false

- name: Upload SARIF

uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

with:

name: config-export-${{ matrix.os }}-${{ matrix.version }}.sarif.json

path: '${{ runner.temp }}/results/javascript.sarif'

retention-days: 7

- name: Check config properties appear in SARIF

uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0

env:

SARIF_PATH: '${{ runner.temp }}/results/javascript.sarif'

with:

script: |

const fs = require('fs');

const sarif = JSON.parse(fs.readFileSync(process.env['SARIF_PATH'], 'utf8'));

const run = sarif.runs[0];

const configSummary = run.properties.codeqlConfigSummary;

if (configSummary === undefined) {

core.setFailed('`codeqlConfigSummary` property not found in the SARIF run property bag.');

}

if (configSummary.disableDefaultQueries !== false) {

core.setFailed('`disableDefaultQueries` property incorrect: expected false, got ' +

`${JSON.stringify(configSummary.disableDefaultQueries)}.`);

}

const expectedQueries = [{ type: 'builtinSuite', uses: 'security-extended' }];

// Use JSON.stringify to deep-equal the arrays.

if (JSON.stringify(configSummary.queries) !== JSON.stringify(expectedQueries)) {

core.setFailed(`\`queries\` property incorrect: expected ${JSON.stringify(expectedQueries)}, got ` +

`${JSON.stringify(configSummary.queries)}.`);

}

core.info('Finished config export tests.');

env:

CODEQL_ACTION_TEST_MODE: true