You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
65
65
# If this step fails, then you should remove it and run the build manually (see below).
66
66
- name: Autobuild
67
-
uses: github/codeql-action/autobuild@v1
67
+
uses: github/codeql-action/autobuild@v2
68
68
69
69
# ℹ️ Command-line programs to run using the OS shell.
70
70
# 📚 https://git.io/JvXDl
@@ -78,14 +78,14 @@ jobs:
78
78
# make release
79
79
80
80
- name: Perform CodeQL Analysis
81
-
uses: github/codeql-action/analyze@v1
81
+
uses: github/codeql-action/analyze@v2
82
82
```
83
83
84
84
If you prefer to integrate this within an existing CI workflow, it should end up looking something like this:
85
85
86
86
```yaml
87
87
- name: Initialize CodeQL
88
-
uses: github/codeql-action/init@v1
88
+
uses: github/codeql-action/init@v2
89
89
with:
90
90
languages: go, javascript
91
91
@@ -95,23 +95,23 @@ If you prefer to integrate this within an existing CI workflow, it should end up
95
95
make release
96
96
97
97
- name: Perform CodeQL Analysis
98
-
uses: github/codeql-action/analyze@v1
98
+
uses: github/codeql-action/analyze@v2
99
99
```
100
100
101
101
### Configuration file
102
102
103
103
Use the `config-file` parameter of the `init` action to enable the configuration file. The value of `config-file` is the path to the configuration file you want to use. This example loads the configuration file `./.github/codeql/codeql-config.yml`.
104
104
105
105
```yaml
106
-
- uses: github/codeql-action/init@v1
106
+
- uses: github/codeql-action/init@v2
107
107
with:
108
108
config-file: ./.github/codeql/codeql-config.yml
109
109
```
110
110
111
111
The configuration file can be located in a different repository. This is useful if you want to share the same configuration across multiple repositories. If the configuration file is in a private repository you can also specify an `external-repository-token` option. This should be a personal access token that has read access to any repositories containing referenced config files and queries.
@@ -122,15 +122,15 @@ For information on how to write a configuration file, see "[Using a custom confi
122
122
If you only want to customise the queries used, you can specify them in your workflow instead of creating a config file, using the `queries` property of the `init` action:
123
123
124
124
```yaml
125
-
- uses: github/codeql-action/init@v1
125
+
- uses: github/codeql-action/init@v2
126
126
with:
127
127
queries: <local-or-remote-query>,<another-query>
128
128
```
129
129
130
130
By default, this will override any queries specified in a config file. If you wish to use both sets of queries, prefix the list of queries in the workflow with `+`:
0 commit comments