Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

paths and paths-ignore config settings are invalid #283

Closed
kwokkan opened this issue Oct 29, 2020 · 2 comments
Closed

paths and paths-ignore config settings are invalid #283

kwokkan opened this issue Oct 29, 2020 · 2 comments

Comments

@kwokkan
Copy link

kwokkan commented Oct 29, 2020

On the docs for the security scanning, it mentions about using the keys paths and paths-ignore to restrict where the scan runs: https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#specifying-directories-to-scan.

In the github/codeql-action/init@v1 action, there doesn't appear to be any configuration options for them.

Is this an issue with the docs or the action?

@robertbrignull
Copy link
Contributor

That section is under using-a-custom-configuration-file so the options go in to a separate yml file instead of directly into the workflow.

What you actually pass to the action is

- uses: github/codeql-action/init@v1
  with:
    config-file: ./.github/codeql/codeql-config.yml

I'm going to close this issue. Let me know if the above doesn't make sense.

mbien added a commit to mbien/roller that referenced this issue Aug 27, 2021
this requires unfortunately another config file since path settings
can't be set in the workflow config.
see github/codeql-action#283
mbien added a commit to apache/roller that referenced this issue Sep 13, 2021
this requires unfortunately another config file since path settings
can't be set in the workflow config.
see github/codeql-action#283
@jeffwidman
Copy link
Member

#1590 may make this possible to pass directly in the workflow file rather than requiring a separate config file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants