Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CodeQL: ignore purposefully invalid ruby files #7126

Merged
merged 1 commit into from
May 12, 2023

Commits on May 12, 2023

  1. CodeQL: ignore purposefully invalid ruby files

    CodeQL is complaining that these two files are unparsable Ruby:
    ```
    [2023-04-20 07:34:33] [build-stdout] [2023-04-20 07:34:33] [build-stdout]  WARN /home/runner/work/dependabot-core/dependabot-core/bundler/spec/fixtures/projects/bundler1/invalid_ruby/Gemfile:2: A parse error occurred. Check the syntax of the file. If the file is invalid, correct the error or exclude the file from analysis.
      [2023-04-20 07:34:33] [build-stdout] [2023-04-20 07:34:33] [build-stdout]  WARN /home/runner/work/dependabot-core/dependabot-core/bundler/spec/fixtures/projects/bundler2/invalid_ruby/Gemfile:2: A parse error occurred. Check the syntax of the file. If the file is invalid, correct the error or exclude the file from analysis.
    ```
    
    These two files are test specs and intentionally unparsable, so ignoring
    them.
    
    Docs on configuring ignores are here:
    * https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/customizing-code-scanning#specifying-directories-to-scan
    * https://github.com/github/codeql-action#configuration-via-config-input
    jeffwidman committed May 12, 2023
    Configuration menu
    Copy the full SHA
    3a74ac1 View commit details
    Browse the repository at this point in the history