Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add QL4QL to analyze the queries #511

Draft
wants to merge 26 commits into
base: main
Choose a base branch
from
Draft

Add QL4QL to analyze the queries #511

wants to merge 26 commits into from

Commits on Jan 26, 2024

  1. Add minimal working Nix env 

    Create a shell environment with a CodeQL CLI that includes the Ql
extractor to create CodeQL databases of QL files.
    @rvermeulen
    rvermeulen committed Jan 26, 2024
    Configuration menu
    Copy the full SHA
    e68fb0e View commit details
    Browse the repository at this point in the history

Commits on Jan 27, 2024

  1. Remove dependency on CodeQL CLI 

    The CLI was only used to format the generated library.
We will skip that for now.
    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    e0841eb View commit details
    Browse the repository at this point in the history

  2. Add derivative CodeQL QL for QL queries and libraries

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    3efa7b5 View commit details
    Browse the repository at this point in the history

  3. Add support for additional packs and extractors

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    c5be6b1 View commit details
    Browse the repository at this point in the history

  4. Rename derivatives and include QL for QL pack.

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    3fbd6a6 View commit details
    Browse the repository at this point in the history

  5. Move CodeQL tooling and shell derivative into tooling directory

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    39126fb View commit details
    Browse the repository at this point in the history

  6. Remove output of environment when building CodeQL derivative

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    cda3971 View commit details
    Browse the repository at this point in the history

  7. Copy the contents of the pack derivative instead of the derivative dir

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    ab731b2 View commit details
    Browse the repository at this point in the history

  8. Add workflow to run CodeQL on QL queries

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    749ea80 View commit details
    Browse the repository at this point in the history

  9. Run analyzes on PRs or pushes to main

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    93b27e8 View commit details
    Browse the repository at this point in the history

  10. Allow usage of non-free derivatives

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    e60bb08 View commit details
    Browse the repository at this point in the history

  11. Pin Nix packages

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    b628c0c View commit details
    Browse the repository at this point in the history

  12. Select the hash based on the platform

    @rvermeulen
    rvermeulen committed Jan 27, 2024
    Configuration menu
    Copy the full SHA
    67baed8 View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2024

  1. Address issue with JDK on Linux 

    This uses the same approach as the CodeQL derivative part of
Nix packages https://github.com/NixOS/nixpkgs/blob/4299aee00ffcb68ecdc5c9a2befc244a61bec5be/pkgs/development/tools/analysis/codeql/default.nix
    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    f80e31e View commit details
    Browse the repository at this point in the history

  2. Prepare all tools for other derivatives

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    6fe5e35 View commit details
    Browse the repository at this point in the history

  3. Add shell derivate to test CodeQL CLI

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    131f6ab View commit details
    Browse the repository at this point in the history

  4. Cache the Nix store for improved runtime

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    4e5d514 View commit details
    Browse the repository at this point in the history

  5. Fix incorrect option specification

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    4121f79 View commit details
    Browse the repository at this point in the history

  6. Close Nix expression

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    cdf9295 View commit details
    Browse the repository at this point in the history

  7. Preserve the GitHub token environment variable to upload results

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    250fe90 View commit details
    Browse the repository at this point in the history

  8. Pass GitHub token through env

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    6f4124e View commit details
    Browse the repository at this point in the history

  9. Limit GH token to security event writes

    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    750e8be View commit details
    Browse the repository at this point in the history

  10. Key the Nix store on the workflow file 

    This allows us to address issues with caching within the workflow file.
    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    1dda311 View commit details
    Browse the repository at this point in the history

  11. Attempt bind mount to address cache write issues 

    Restoring the cache currently fails with permission issues.
This is an attempt to address that.
    @rvermeulen
    rvermeulen committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    9537f6a View commit details
    Browse the repository at this point in the history

Commits on Jan 30, 2024

  1. Attempt use of Nix copy command for caching store

    @rvermeulen
    rvermeulen committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    b824f61 View commit details
    Browse the repository at this point in the history

  2. Unify cache key

    @rvermeulen
    rvermeulen committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    e7ea5b7 View commit details
    Browse the repository at this point in the history