fix(codeql): analyse the languages this repository actually has - #66
Conversation
`codeql database finalize` was exiting 32 on every run:
CodeQL could not process any code written in JavaScript/TypeScript.
The matrix asserted javascript-typescript, which this repository does not contain.
Its languages are: none.
This is not only a failing check. The crash uploads no SARIF, so a
`code_scanning` ruleset rule requiring CodeQL waits forever on "Code scanning
is waiting for results from CodeQL" — one fault, two symptoms. Relaxing the
rule's thresholds could not have helped, because no results arrive at all.
New matrix: actions. `actions` is valid in every repository (every
repository has workflow files) and keeps this workflow producing a check and a
SARIF upload even where CodeQL can analyse nothing else — most of this estate
is written in languages CodeQL does not support.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedUpdates the CodeQL workflow matrix to target only repository-relevant languages, resolving the persistent JavaScript/TypeScript analysis failure. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Important Your trial ends in 4 days — upgrade now to keep code review, CI analysis, auto-apply, custom automations, and more. Was this helpful? React with 👍 / 👎 | Gitar |
|
|
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
2 participants
codeql database finalizewas exiting 32 on every run:The matrix asserted
javascript-typescript; this repository's languages arenone. Onecodeql.ymlwas copied estate-wide with a hard-coded JS matrix — 82 repositories carry it, and 17 of the 18 sampled have no JavaScript at all (Julia, Rust, Zig, Agda, Ada, Haskell, Elixir).This is not only a failing check. The crash uploads no SARIF, so a
code_scanningruleset rule requiring CodeQL waits forever on "Code scanning is waiting for results from CodeQL". One fault, two symptoms — and relaxing the rule's thresholds could not have helped, because no results arrive at all.actionsis kept (or added): it is valid in every repository, since every repository has workflow files, and it keeps this workflow producing a check and a SARIF upload even where CodeQL can analyse nothing else.🤖 Generated with Claude Code