CodeQL being very slow when passed --command parameter
- Langage dominant
- CodeQL
- Étoiles
- 10.1k
- Forks
- 2.1k
- Merge moyen
- 2 j 15 h
- PR mergées (30 j)
- 141
Description
I am trying to run CodeQL on ServiceFabric codebase and its being very slow when I pass `--command`. My understanding is when we pass `--command` CodQL invokes this command at the source code directory and analyzes the output. Running `sfbuild -release` takes 2 hours and running it as part of CodeQL took ~48 hours. I am wondering why it's being slow? is there a way to run "sfbuild -release" separately and then pass the output to CodeQL afterwards? thank you.
```shell
codeql database create --language=cpp --source-root=C:\WindowsFabric testcodeqldb --command="sfbuild -release"
```
Guide de contribution
Ouvrir le guide de contribution
Piste de recherche
Start with the reported `codeql database create --language=cpp --source-root=C:\WindowsFabric testcodeqldb --command="sfbuild -release"` invocation and compare its behavior with running `sfbuild -release` separately. Investigate the documented `--command` workflow and whether its output can be supplied afterward. Done means explaining the 48-hour runtime and providing a supported workflow or a reproducible limitation.
Rédigé par le modèle d'indexation à partir du texte de l'issue.
Évaluation
- Stack technique
- cpp, shell
- Domaine
- devtools, security
- Type d'issue
- Bug
- Difficulté
- 5/5
- Temps estimé
- Plus d'une semaine
- Activité
- À l'abandon
- Clarté
- À clarifier
- Accessibilité débutants
- 20/100