github / github/codeql

CodeQL being very slow when passed --command parameter

Ouverte
#16,361 3 commentaires 1 réaction 0 personnes assignées Voir sur GitHub
C++ question
Langage dominant
CodeQL
Étoiles
10.1k
Forks
2.1k
Merge moyen
2 j 15 h
PR mergées (30 j)
141

Description

I am trying to run CodeQL on ServiceFabric codebase and its being very slow when I pass `--command`. My understanding is when we pass `--command` CodQL invokes this command at the source code directory and analyzes the output. Running `sfbuild -release` takes 2 hours and running it as part of CodeQL took ~48 hours. I am wondering why it's being slow? is there a way to run "sfbuild -release" separately and then pass the output to CodeQL afterwards? thank you.

```shell
codeql database create --language=cpp --source-root=C:\WindowsFabric testcodeqldb --command="sfbuild -release"
```

Guide de contribution

Ouvrir le guide de contribution

Piste de recherche

Start with the reported `codeql database create --language=cpp --source-root=C:\WindowsFabric testcodeqldb --command="sfbuild -release"` invocation and compare its behavior with running `sfbuild -release` separately. Investigate the documented `--command` workflow and whether its output can be supplied afterward. Done means explaining the 48-hour runtime and providing a supported workflow or a reproducible limitation.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Stack technique
cpp, shell
Domaine
devtools, security
Type d'issue
Bug
Difficulté
5/5
Temps estimé
Plus d'une semaine
Activité
À l'abandon
Clarté
À clarifier
Accessibilité débutants
20/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.