CodeQL Auto-Setup Task Improvements - #58
Conversation
…e CodeQL task configuration
| case "C#": languages.add("csharp");break; | ||
| case "C++": languages.add("cpp");break; | ||
| case "Java": languages.add("java");break; | ||
| case "Kotlin": languages.add("java");break; |
There was a problem hiding this comment.
Go,CPP,Swift, and Kotlin not currently supported by build mode none so have a lower success rate.
Go should be higher success compared to the rest ...
There was a problem hiding this comment.
Hi Chad Bentz (@felickz)! According to this doc, all these languages are supported: https://learn.microsoft.com/en-us/azure/devops/repos/security/github-advanced-security-code-scanning?view=azure-devops#language-and-query-support
In my case, I don't mind if the success rate is lower — I just want to make sure everything is covered. The alternative would be having no coverage at all, which isn't an option :) and this task it's only to config the language, maybe we should have another variable to set the build mode... I don't know
thanks!!
|
|
||
|
|
||
| // Add just the languages supported by CodeQL | ||
| switch(lang.name){ |
There was a problem hiding this comment.
Casing on these? Is this api documented anywhere? Ex: Ruby vs ruby, and go
There was a problem hiding this comment.
Hey Chad Bentz (@felickz)! I used this link to check which languages are supported: https://learn.microsoft.com/en-us/azure/devops/repos/security/github-advanced-security-code-scanning?view=azure-devops#language-and-query-support and it seems it's case sensitive
Dev Environment Enhancements:
.devcontainer/devcontainer.jsonto streamline the development setup with a pre-configured environment..github/dependabot.ymlto automate dependency updates for the dev container, scheduled to run weekly.CodeQL Auto-Setup Task Improvements:
index.tsfile to include additional languages supported by CodeQL such as C#, C++, Java, and Swift, and added corresponding console logs. [1] [2]package.jsonfile to use the latest version of@types/nodedependency.task.jsonandvss-extension.jsonto reflect the new changes, with the version incremented to 0.2.1. [1] [2]