| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
Sorry, something went wrong.
There was a problem hiding this comment.
I haven't reviewed in huge detail. I can do that tomorrow or leave it to the CodeQL team. I have a couple of initial comments though.
Sorry, something went wrong.
As suggested in review: The `GITHUB_REPOSITORY` environment variable is only available on Actions. Passing it in explicitly avoids potentially crashing if this code is called from the runner.
There was a problem hiding this comment.
Looks good. A few minor comments.
Sorry, something went wrong.
There was a problem hiding this comment.
LGTM too once @aeisenberg is happy
Sorry, something went wrong.
Replaces the previous string literal type
There was a problem hiding this comment.
Nice.
Sorry, something went wrong.
| Back | FazBrowse Home | New Git URL |
This PR introduces feature flagging to the CodeQL Action via a GitHub API endpoint /repositories/:repository_id/code-scanning/codeql-action/features (see backlinked issue). This API endpoint only exists on Dotcom, so for GHES and GHAE feature flags will all be marked as disabled.
This is a general purpose solution that'll allow us to add many feature flags to the CodeQL Action while only calling a single API endpoint. In this PR we use this mechanism to replace the database uploading feature flags; in the future we'll use it to decide whether to run ML-powered queries.
I've written some unit tests for the feature flagging class, and verified that database upload works as expected on a repo with the feature flag enabled. Ideas for further testing welcome.
Merge / deployment checklist