justAnotherProgrammmmer / springBoot.github.aws

Projects to take advantages of aws-github-springBoot integration
0 stars 0 forks source link

Configure codeql correctly for Java and JavaScript #9

Closed justAnotherProgrammmmer closed 1 year ago

justAnotherProgrammmmer commented 1 year ago

We will be configuring codeql for code quality control. Current scope includes java and javascript. This will also limit merge unless and until issues are resolved.

justAnotherProgrammmmer commented 1 year ago

Current configured codeql is only compatible till Java 11. We need to either 1] move back to java 11 or 2]find out version or other code analyser which works with java 17.

Currently searching options for java 17. Please see logs below for explanation

[2022-10-23 19:14:35] [autobuild] Caused by: org.gradle.internal.component.NoMatchingConfigurationSelectionException: No matching variant of org.springframework.boot:spring-boot-gradle-plugin:3.0.0-SNAPSHOT:20221021.175811-952 was found. The consumer was configured to find a runtime of a library compatible with Java 11, packaged as a jar, and its dependencies declared externally, as well as attribute 'org.gradle.plugin.api-version' with value '7.5.1' but: [2022-10-23 19:14:35] [autobuild] - Variant 'apiElements' capability org.springframework.boot:spring-boot-gradle-plugin:3.0.0-SNAPSHOT declares a library, packaged as a jar, and its dependencies declared externally: [2022-10-23 19:14:35] [autobuild] - Incompatible because this component declares an API of a component compatible with Java 17 and the consumer needed a runtime of a component compatible with Java 11 [2022-10-23 19:14:35] [autobuild] - Other compatible attribute: [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about org.gradle.plugin.api-version (required '7.5.1') [2022-10-23 19:14:35] [autobuild] - Variant 'javadocElements' capability org.springframework.boot:spring-boot-gradle-plugin:3.0.0-SNAPSHOT declares a runtime of a component, and its dependencies declared externally: [2022-10-23 19:14:35] [autobuild] - Incompatible because this component declares documentation and the consumer needed a library [2022-10-23 19:14:35] [autobuild] - Other compatible attributes: [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about its target Java version (required compatibility with Java 11) [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about its elements (required them packaged as a jar) [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about org.gradle.plugin.api-version (required '7.5.1') [2022-10-23 19:14:35] [autobuild] - Variant 'mavenOptionalApiElements' capability org.springframework.boot:spring-boot-gradle-plugin-maven-optional:3.0.0-SNAPSHOT declares a library, packaged as a jar, and its dependencies declared externally: [2022-10-23 19:14:35] [autobuild] - Incompatible because this component declares an API of a component compatible with Java 17 and the consumer needed a runtime of a component compatible with Java 11 [2022-10-23 19:14:35] [autobuild] - Other compatible attribute: [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about org.gradle.plugin.api-version (required '7.5.1') [2022-10-23 19:14:35] [autobuild] - Variant 'mavenOptionalRuntimeElements' capability org.springframework.boot:spring-boot-gradle-plugin-maven-optional:3.0.0-SNAPSHOT declares a runtime of a library, packaged as a jar, and its dependencies declared externally: [2022-10-23 19:14:35] [autobuild] - Incompatible because this component declares a component compatible with Java 17 and the consumer needed a component compatible with Java 11 [2022-10-23 19:14:35] [autobuild] - Other compatible attribute: [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about org.gradle.plugin.api-version (required '7.5.1') [2022-10-23 19:14:35] [autobuild] - Variant 'runtimeElements' capability org.springframework.boot:spring-boot-gradle-plugin:3.0.0-SNAPSHOT declares a runtime of a library, packaged as a jar, and its dependencies declared externally: [2022-10-23 19:14:35] [autobuild] - Incompatible because this component declares a component compatible with Java 17 and the consumer needed a component compatible with Java 11 [2022-10-23 19:14:35] [autobuild] - Other compatible attribute: [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about org.gradle.plugin.api-version (required '7.5.1') [2022-10-23 19:14:35] [autobuild] - Variant 'sourcesElements' capability org.springframework.boot:spring-boot-gradle-plugin:3.0.0-SNAPSHOT declares a runtime of a component, and its dependencies declared externally: [2022-10-23 19:14:35] [autobuild] - Incompatible because this component declares documentation and the consumer needed a library [2022-10-23 19:14:35] [autobuild] - Other compatible attributes: [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about its target Java version (required compatibility with Java 11) [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about its elements (required them packaged as a jar) [2022-10-23 19:14:35] [autobuild] - Doesn't say anything about org.gradle.plugin.api-version (required '7.5.1')

secondincommanddeveloper commented 1 year ago

We ended up using Qodana from JetBrains. It works on JVM level, so no issues.

secondincommanddeveloper commented 1 year ago

Refer 208ddb68d3f5add26208de33a30f244a87db3e30