CodeQL Configurations #45
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request primarily introduces a new feature to the GitHub Actions workflow that allows for the testing of CodeQL configurations. It includes the addition of a bash script for compiling and testing configurations, updates to the build workflow to include a new job for configuration testing, and modifications to the README files to reflect these changes. Additionally, two new configuration files have been added to the
configs
directory.New Feature - Configuration Testing:
.github/scripts/pr-configs.sh
: A new bash script has been added that compiles and tests CodeQL configurations. It takes a pull request number as an argument, and for each file in the pull request, if the file is a configuration file, it compiles and tests the configuration..github/workflows/build.yml
: The build workflow has been updated to include a new job,configs
, which runs onubuntu-latest
and depends on thecompile
job. This job checks out the repository, initializes CodeQL, and runs the newpr-configs.sh
script if there are changes in theconfigs
directory.Documentation Updates:
README.md
: The README has been updated to include information on using community packs with provided configuration files, and a link to theconfigs
directory has been added in the Support section. [1] [2]configs/README.md
: A new README file has been added to theconfigs
directory, providing details on the purpose and usage of the configuration files in the directory.New Configuration Files:
configs/audit.yml
: A new configuration file for auditing code using CodeQL. It includes references to audit query suites for several languages.configs/default.yml
: A new default configuration file for using CodeQL Community Packs. It includes references to queries for several languages.