Remove codeql distro dependencies

Do not clone CodeQL

Author: Alvaro Muñoz

.github/scripts/pr-compile.sh

@@ -9,8 +9,8 @@ LIBRARY_SCANNED=false
 echo "[+] Compiling all queries in $LANGUAGE"
 gh codeql query compile \
     --threads=0 --check-only \
-    --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
     "./$LANGUAGE/"
+    # --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
 
 for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
     if [[ ! -f "$file" ]]; then
@@ -25,17 +25,17 @@ for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
         gh codeql query compile  \
             --threads=0 --check-only \
             --warnings=error \
-            --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
             "./$file"
+            # --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
 
     # if lib folder is modified
     elif [[ "$file" == $LANGUAGE/lib/* ]] && [[ $LIBRARY_SCANNED == false ]]; then
         echo "[+] Libray changed, compiling all queries in $LANGUAGE"
         gh codeql query compile \
             --threads=0 --check-only \
             --warnings=error \
-            --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
             "./$LANGUAGE/"
+            # --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
         # set LIBRARY_SCANNED to true to prevent recompiling
         LIBRARY_SCANNED=true
 

.github/scripts/pr-suites-packs.sh

@@ -13,10 +13,9 @@ for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
     # suite folder 
     if [[ "$file" == $LANGUAGE/suites/**.qls ]]; then
         echo "[+] Compiling Suite: $file"
-        gh codeql resolve queries \
-            --search-path=./codeql \
-            --additional-packs=./codeql:./codeql/misc \
-            "$file"
+        gh codeql resolve queries "$file"
+        # --search-path=./codeql \
+        # --additional-packs=./codeql:./codeql/misc \
 
     # qlpack file and lock file
     elif [[ "$file" == $LANGUAGE/qlpack.yml ]] || [[ "$file" == $LANGUAGE/codeql-pack.lock.yml ]]; then

.github/scripts/pr-tests.sh

@@ -10,10 +10,8 @@ if [[ ! -d ./${LANGUAGE}/test/ ]]; then
 fi
 
 echo "[+] Compiling all queries in $LANGUAGE"
-gh codeql query compile \
-    --threads=0 --check-only \
-    --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
-    "./$LANGUAGE/"
+gh codeql query compile --threads=0 --check-only "./$LANGUAGE/"
+    # --search-path=./codeql --additional-packs=./codeql:./codeql/misc \
 
 for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
     if [[ ! -f "$file" ]]; then
@@ -25,9 +23,8 @@ for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
         echo "[+] Test $file changed"
         TEST_DIR=$(dirname "$file")
         # run tests in the folder the change occured in
-        gh codeql test run \
-            --additional-packs=./ --additional-packs=./codeql \
-            "$TEST_DIR"
+        gh codeql test run "$TEST_DIR"
+        # --additional-packs=./ --additional-packs=./codeql \
 
     # if the files is a query file .ql or .qll
     elif [[ "$file" == $LANGUAGE/**.ql ]] || [[ "$file" == $LANGUAGE/**.qll ]] ; then
@@ -38,9 +35,8 @@ for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
 
         if [[ -d "$TEST_DIR" ]]; then
             echo "[+] Running tests for $file -> $TEST_DIR"
-            gh codeql test run \
-                --additional-packs=./ --additional-packs=./codeql \
-                "$TEST_DIR"
+            gh codeql test run "$TEST_DIR"
+            # --additional-packs=./ --additional-packs=./codeql \
 
         else
             echo "[!] No tests found at $TEST_DIR"
@@ -52,9 +48,8 @@ for file in $(gh pr view "$PR_NUMBER" --json files --jq '.files.[].path'); do
 
         if [[ -d "$TEST_DIR" ]]; then
             echo "[+] Running tests for $file -> $TEST_DIR"
-            gh codeql test run \
-                --additional-packs=./ --additional-packs=./codeql \
-                "$TEST_DIR"
+            gh codeql test run "$TEST_DIR"
+            # --additional-packs=./ --additional-packs=./codeql \
         else
             echo "[!] No tests found for $file (in $LANGUAGE)"
         fi

.github/workflows/build.yml

@@ -33,7 +33,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ github.token }}
         run: |
-          gh repo clone github/codeql
+          # gh repo clone github/codeql
           gh extension install github/gh-codeql
           gh codeql pack download "codeql/${{ matrix.language }}-queries"
           gh codeql pack install "${{ matrix.language }}/lib"