actions
/
checkout
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

codeql should analyze lib not dist (#620)

This commit is contained in:
eric sciple 2021-10-20 15:11:24 -05:00 committed by GitHub
parent 3d677ac575
commit fd47087372
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
.github/workflows/codeql-analysis.yml vendored
View File

@ -41,7 +41,6 @@ jobs:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v2 uses: actions/checkout@v2
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@v1 uses: github/codeql-action/init@v1
with: with:
@ -51,21 +50,9 @@ jobs:
# Prefix the list here with "+" to use these queries and those in the config file. # Prefix the list here with "+" to use these queries and those in the config file.
# queries: ./path/to/local/query, your-org/your-repo/queries@main # queries: ./path/to/local/query, your-org/your-repo/queries@main
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java). - run: npm ci
# If this step fails, then you should remove it and run the build manually (see below) - run: npm run build
- name: Autobuild - run: rm -rf dist # We want code scanning to analyze lib instead (individual .js files)
uses: github/codeql-action/autobuild@v1
# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
# and modify them (or add more) to build your code if your project
# uses a compiled language
#- run: |
# make bootstrap
# make release
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v1 uses: github/codeql-action/analyze@v1