FilesExpand file tree

v4.39.1

/

query-filters.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

75 lines (65 loc) · 2.54 KB

v4.39.1

/

query-filters.yml

Copy path

Top

File metadata and controls

• Code
• Blame

75 lines (65 loc) · 2.54 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

name: Query filters tests

on:

push:

branches:

- main

- releases/v*

pull_request:

merge_group:

types: [checks_requested]

schedule:

- cron: '0 5 * * *'

workflow_dispatch:

concurrency:

cancel-in-progress: ${{ github.event_name == 'pull_request' || false }}

group: ${{ github.workflow }}-${{ github.ref }}

defaults:

run:

shell: bash

jobs:

query-filters:

name: Query Filters Tests

if: github.triggering_actor != 'dependabot[bot]'

timeout-minutes: 45

runs-on: ubuntu-latest

permissions:

contents: read # This permission is needed to allow the GitHub Actions workflow to read the contents of the repository.

steps:

- name: Check out repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Install Node.js

uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0

with:

node-version: 24

cache: npm

- name: Install dependencies

run: npm ci

- name: Prepare test

id: prepare-test

uses: ./.github/actions/prepare-test

with:

version: linked

- name: Check SARIF for default queries with Single include, Single exclude

uses: ./../action/.github/actions/query-filter-test

with:

sarif-file: ${{ runner.temp }}/results/javascript.sarif

queries-run: js/zipslip

queries-not-run: js/path-injection

config-file: ./.github/codeql/codeql-config-query-filters1.yml

tools: ${{ steps.prepare-test.outputs.tools-url }}

- name: Check SARIF for query packs with Single include, Single exclude

uses: ./../action/.github/actions/query-filter-test

with:

sarif-file: ${{ runner.temp }}/results/javascript.sarif

queries-run: js/zipslip,javascript/example/empty-or-one-block

queries-not-run: js/path-injection

config-file: ./.github/codeql/codeql-config-query-filters2.yml

tools: ${{ steps.prepare-test.outputs.tools-url }}

- name: Check SARIF for query packs and local queries with Single include, Single exclude

uses: ./../action/.github/actions/query-filter-test

with:

sarif-file: ${{ runner.temp }}/results/javascript.sarif

queries-run: js/zipslip,javascript/example/empty-or-one-block,inrepo-javascript-querypack/show-ifs

queries-not-run: js/path-injection,complex-python-querypack/show-ifs,complex-python-querypack/foo/bar/show-ifs

config-file: ./.github/codeql/codeql-config-query-filters3.yml

tools: ${{ steps.prepare-test.outputs.tools-url }}