search

github / codeql-action

Actions for running CodeQL analysis
MIT License
1.12k stars 310 forks source link

General poor performance detecting files #2309

Open mcandre opened 3 months ago

mcandre commented 3 months ago

Hi,

I enabled CodeQL via the GitHub Web UI, using the defaults. But it fails to detect basic C/C++ files, YML/YAML files, and many other languages and configuration formats besides.

Example:

https://github.com/mcandre/swiper

aibaars commented 3 months ago

Looking at the repository mentioned above, it only contains C/C++ , build scripts, and shell scripts. CodeQL tries to automatically build and analyse the C/C++ code by running cmake but this fails due to the following error:

 CMake Error at CMakeLists.txt:14 (include):
    include could not find requested file:

      /home/runner/work/swiper/swiper/_codeql_build_dir/conanbuildinfo.cmake

  CMake Error at CMakeLists.txt:15 (conan_basic_setup):
    Unknown CMake command "conan_basic_setup".

You may want to try Advance Setup and define your own Actions workflow for CodeQL: https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning . Alternatively, you could change your cmake scripts so that they work with CodeQL.