Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Test variant scan on fork without other changes #14

Open
wants to merge 1 commit into
base: devel
Choose a base branch
from
Open

Test variant scan on fork without other changes #14

wants to merge 1 commit into from

Conversation

dfarrell07
Copy link
Owner

Signed-off-by: Daniel Farrell [email protected]

@dfarrell07
Add CodeQL variant analysis scanning
ea6f546 
This is a different type of static analysis than others we run.

It identified new issues (already fixed) that our other tools missed.

The company that built it was bought by GitHub and the tool is being
integrated into GitHub's security workflow.

Add one unprivileged version of the job to gate PRs and one privileged
version on-merge to report results.

Relates-to: submariner-io/submariner#1970
Signed-off-by: Daniel Farrell <[email protected]>
@dfarrell07 dfarrell07 force-pushed the codeql_fork_default_test branch from 5c29253 to ea6f546 Compare September 1, 2022 17:42
@dfarrell07
Copy link
Owner Author 

Error: The process '/opt/hostedtoolcache/CodeQL/0.0.0-20220811/x64/codeql/codeql' failed with exit code 2
      at toolrunnerErrorCatcher (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/toolrunner-error-catcher.js:86:19)
      at processTicksAndRejections (node:internal/process/task_queues:96:5)
      at async Object.extractScannedLanguage (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/codeql.js:561:13)
      at async createdDBForScannedLanguages (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/analyze.js:82:13)
      at async finalizeDatabaseCreation (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/analyze.js:101:5)
      at async runFinalize (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/analyze.js:2[49](https://github.com/dfarrell07/subctl/runs/8141637295?check_suite_focus=true#step:5:50):5)
      at async run (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/analyze-action.js:83:9)
      at async runWrapper (/home/runner/work/_actions/github/codeql-action/2ca79b6fa8d3ec278944088b4aa5f46912db5d63/lib/analyze-action.js:221:9)

🤯

@dfarrell07 dfarrell07 mentioned this pull request Sep 13, 2022
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@dfarrell07