Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge main into releases/v2 #1476

Merged
merged 46 commits into from
Jan 12, 2023
Merged

Merge main into releases/v2 #1476

merged 46 commits into from
Jan 12, 2023

Commits on Dec 14, 2022

  1. Update changelog and version after v2.1.37

    github-actions[bot] committed Dec 14, 2022
    Configuration menu
    Copy the full SHA
    6ac6037 View commit details
    Browse the repository at this point in the history

  2. Update checked-in dependencies

    github-actions[bot] committed Dec 14, 2022
    Configuration menu
    Copy the full SHA
    04f1897 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #1437 from github/mergeback/v2.1.37-to-main-959cbb74 

    Mergeback v2.1.37 refs/heads/releases/v2 into main
    @henrymercer
    henrymercer committed Dec 14, 2022
    Configuration menu
    Copy the full SHA
    0a3f985 View commit details
    Browse the repository at this point in the history

Commits on Dec 19, 2022

  1. Set up the Swift version the extractor declares (#1422) 

    Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
    @angelapwen @adityasharad
    angelapwen and adityasharad committed Dec 19, 2022
    Configuration menu
    Copy the full SHA
    4778dfb View commit details
    Browse the repository at this point in the history

Commits on Dec 20, 2022

  1. Remove tests with old certifi dependency

    @henrymercer
    henrymercer committed Dec 20, 2022
    Configuration menu
    Copy the full SHA
    e4818d4 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1441 from github/henrymercer/remove-old-certifi-t… 

    …ests

Remove tests with old certifi dependency
    @henrymercer
    henrymercer committed Dec 20, 2022
    Configuration menu
    Copy the full SHA
    579411f View commit details
    Browse the repository at this point in the history

Commits on Dec 21, 2022

  1. Check for successful completion rather than SARIF upload 

    This doesn’t affect the overall behaviour, but means we can
short-circuit slightly more quickly when `analyze` is passed
`upload: false`.
    @henrymercer
    henrymercer committed Dec 21, 2022
    Configuration menu
    Copy the full SHA
    8d1e008 View commit details
    Browse the repository at this point in the history

  2. Add a better log message for reusable workflow calls

    @henrymercer
    henrymercer committed Dec 21, 2022
    Configuration menu
    Copy the full SHA
    8b9e982 View commit details
    Browse the repository at this point in the history

  3. Improve error message when workflow file doesn't exist

    @henrymercer
    henrymercer committed Dec 21, 2022
    Configuration menu
    Copy the full SHA
    e9ff99b View commit details
    Browse the repository at this point in the history

  4. Demote upload failed SARIF run info statements to debug 

    We now report errors via telemetry, and this feature will shortly be
enabled by default.
    @henrymercer
    henrymercer committed Dec 21, 2022
    Configuration menu
    Copy the full SHA
    e09fbf5 View commit details
    Browse the repository at this point in the history

Commits on Dec 22, 2022

  1. Improve method naming

    @henrymercer
    henrymercer committed Dec 22, 2022
    Configuration menu
    Copy the full SHA
    3224214 View commit details
    Browse the repository at this point in the history

  2. Remove redundant log messages

    @henrymercer
    henrymercer committed Dec 22, 2022
    Configuration menu
    Copy the full SHA
    59ebabd View commit details
    Browse the repository at this point in the history

  3. Add more tests for uploading failed SARIF 

    Test results directly via return value of `testFailedSarifUpload` vs
via checking log messages.
    @henrymercer
    henrymercer committed Dec 22, 2022
    Configuration menu
    Copy the full SHA
    4789c13 View commit details
    Browse the repository at this point in the history

Commits on Jan 3, 2023

  1. Code scanning: Add scheduled trigger to workflow 

    Ensure we are regularly running code scanning using
the latest CodeQL and remain up to date with the
internal security scorecard, even if we have a period
longer than a week with no pushes to the repo.
    @adityasharad
    adityasharad committed Jan 3, 2023
    Configuration menu
    Copy the full SHA
    ef21864 View commit details
    Browse the repository at this point in the history

  2. Code scanning: Add step titles to workflow

    @adityasharad
    adityasharad committed Jan 3, 2023
    Configuration menu
    Copy the full SHA
    f837e8e View commit details
    Browse the repository at this point in the history

  3. Merge pull request #1460 from github/adityasharad/actions/code-scanni… 

    …ng-schedule

Code scanning: Add scheduled trigger to workflow
    @adityasharad
    adityasharad committed Jan 3, 2023
    Configuration menu
    Copy the full SHA
    484236c View commit details
    Browse the repository at this point in the history

Commits on Jan 4, 2023

  1. Merge pull request #1444 from github/henrymercer/reporting-failed-run… 

    …-improvements

Improve reporting failed runs via SARIF
    @henrymercer
    henrymercer committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    ff3337e View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2023

  1. Refactor CodeQL setup

    @henrymercer
    henrymercer committed Jan 5, 2023
    Configuration menu
    Copy the full SHA
    5eba74a View commit details
    Browse the repository at this point in the history

Commits on Jan 6, 2023

  1. Improve logging around authorization headers

    @henrymercer
    henrymercer committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    b2b4782 View commit details
    Browse the repository at this point in the history

  2. Use a stream when uploading database contents

    @robertbrignull
    robertbrignull committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    6ce923c View commit details
    Browse the repository at this point in the history

  3. Move database bundling to inside the try-catch

    @robertbrignull
    robertbrignull committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    e8f7169 View commit details
    Browse the repository at this point in the history

  4. Update to CoideQL bundle 20230105 (2.12.0)

    @dbartol
    dbartol committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    4e5a06f View commit details
    Browse the repository at this point in the history

  5. Add change note for bundle update

    @dbartol
    dbartol committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    bfbb7ab View commit details
    Browse the repository at this point in the history

  6. Add CLI version field and prior release fields to defaults file (#1463 

    )

* Add CLI version field to `defaults` file

* Add fields for prior CLI version
    @angelapwen
    angelapwen committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    b4187d6 View commit details
    Browse the repository at this point in the history

  7. Merge branch 'main' into dbartol/bundle-20230105

    @dbartol
    dbartol committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    b9c859b View commit details
    Browse the repository at this point in the history

  8. Rebuild

    @dbartol
    dbartol committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    f9c9a25 View commit details
    Browse the repository at this point in the history

  9. Merge pull request #1462 from github/henrymercer/refactor-codeql-setup 

    Refactor CodeQL setup
    @henrymercer
    henrymercer committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    cf1437a View commit details
    Browse the repository at this point in the history

  10. Send the external repository token to the CLI 

    This commit does a few related things:

1. Bumps the minimum version for cli config parsing to 2.10.6
2. Ensures that if cli config parsing is enabled, then remove repos
   are _not_ downloaded by the action. It happens in the CLI.
3. Passes the `--external-repository-token-stdin` option to the CLI
   and passes the appropriate token via stdin if cli config parsing is
   enabled.
    @aeisenberg
    aeisenberg committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    4023575 View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2023

  1. Close stream after use

    @robertbrignull
    robertbrignull committed Jan 9, 2023
    Configuration menu
    Copy the full SHA
    a9337bc View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1465 from github/robertbrignull/upload_database_s… 

    …tream

Use a stream when uploading database contents
    @robertbrignull
    robertbrignull committed Jan 9, 2023
    Configuration menu
    Copy the full SHA
    166d98c View commit details
    Browse the repository at this point in the history

Commits on Jan 10, 2023

  1. Merge branch 'main' into dbartol/bundle-20230105

    @dbartol
    dbartol committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    bac4fe1 View commit details
    Browse the repository at this point in the history

  2. Temporarily disable Kotlin analysis in PR checks 

    Kotlin analysis is incompatible with Kotlin 1.8.0, which is now rolling
out to the Actions runner images.

While we work on a more permanent fix to our PR checks, this will
prevent us losing other
test coverage.
    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    620a267 View commit details
    Browse the repository at this point in the history

  3. Ensure we don't unset CODEQL_EXTRACTOR_JAVA_AGENT_DISABLE_KOTLIN

    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    80b12d6 View commit details
    Browse the repository at this point in the history

  4. Improve CodeQL setup test structure and naming

    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    9203e31 View commit details
    Browse the repository at this point in the history

  5. Fix GHAE CodeQL setup test

    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    9f8ddbd View commit details
    Browse the repository at this point in the history

  6. Add a note regarding the sinon workaround

    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    28a9b2d View commit details
    Browse the repository at this point in the history

  7. Merge pull request #1473 from github/henrymercer/temporarily-disable-… 

    …kotlin-in-pr-checks

Temporarily disable Kotlin analysis in PR checks
    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    f12f76f View commit details
    Browse the repository at this point in the history

  8. Address comments from PR

    @aeisenberg
    aeisenberg committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    272d916 View commit details
    Browse the repository at this point in the history

  9. Merge pull request #1466 from github/dbartol/bundle-20230105 

    Update bundle to 2.12.0
    @dbartol
    dbartol committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    bdc7c5d View commit details
    Browse the repository at this point in the history

  10. Merge branch 'main' into henrymercer/fix-ghae-setup-test

    @henrymercer
    henrymercer committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    70a288d View commit details
    Browse the repository at this point in the history

  11. Merge branch 'main' into aeisenberg/externalRepoTokenConfigParsing

    @aeisenberg
    aeisenberg committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    e009918 View commit details
    Browse the repository at this point in the history

  12. Merge pull request #1464 from github/aeisenberg/externalRepoTokenConf… 

    …igParsing

Send the external repository token to the CLI
    @aeisenberg
    aeisenberg committed Jan 10, 2023
    Configuration menu
    Copy the full SHA
    42d6d35 View commit details
    Browse the repository at this point in the history

Commits on Jan 11, 2023

  1. Merge branch 'main' into henrymercer/fix-ghae-setup-test

    @henrymercer
    henrymercer committed Jan 11, 2023
    Configuration menu
    Copy the full SHA
    4a91879 View commit details
    Browse the repository at this point in the history

  2. Add JSDoc for mockDownloadApi

    @henrymercer
    henrymercer committed Jan 11, 2023
    Configuration menu
    Copy the full SHA
    6ba0a36 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #1474 from github/henrymercer/fix-ghae-setup-test 

    Refactor CodeQL setup tests and fix GHAE test
    @henrymercer
    henrymercer committed Jan 11, 2023
    Configuration menu
    Copy the full SHA
    70fdddf View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2023

  1. Update changelog for v2.1.38

    github-actions[bot] committed Jan 12, 2023
    Configuration menu
    Copy the full SHA
    caa49ae View commit details
    Browse the repository at this point in the history