Skip to content

CodeQL Auto-Setup Task Improvements - #58

Open
Gisela Torres (0GiS0) wants to merge 5 commits into
microsoft:mainfrom
0GiS0:main
Open

CodeQL Auto-Setup Task Improvements#58
Gisela Torres (0GiS0) wants to merge 5 commits into
microsoft:mainfrom
0GiS0:main

Conversation

@0GiS0

Copy link
Copy Markdown
Contributor

Dev Environment Enhancements:

  • Added a new dev container configuration in .devcontainer/devcontainer.json to streamline the development setup with a pre-configured environment.
  • Configured Dependabot in .github/dependabot.yml to automate dependency updates for the dev container, scheduled to run weekly.

CodeQL Auto-Setup Task Improvements:

  • Updated the index.ts file to include additional languages supported by CodeQL such as C#, C++, Java, and Swift, and added corresponding console logs. [1] [2]
  • Updated the package.json file to use the latest version of @types/node dependency.
  • Updated the task version in task.json and vss-extension.json to reflect the new changes, with the version incremented to 0.2.1. [1] [2]

case "C#": languages.add("csharp");break;
case "C++": languages.add("cpp");break;
case "Java": languages.add("java");break;
case "Kotlin": languages.add("java");break;

@felickz Chad Bentz (felickz) Apr 21, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Go,CPP,Swift, and Kotlin not currently supported by build mode none so have a lower success rate.

Go should be higher success compared to the rest ...

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#37

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi Chad Bentz (@felickz)! According to this doc, all these languages are supported: https://learn.microsoft.com/en-us/azure/devops/repos/security/github-advanced-security-code-scanning?view=azure-devops#language-and-query-support

In my case, I don't mind if the success rate is lower — I just want to make sure everything is covered. The alternative would be having no coverage at all, which isn't an option :) and this task it's only to config the language, maybe we should have another variable to set the build mode... I don't know

thanks!!



// Add just the languages supported by CodeQL
switch(lang.name){

@felickz Chad Bentz (felickz) Apr 21, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Casing on these? Is this api documented anywhere? Ex: Ruby vs ruby, and go

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants