github / github/codeql

Update from Go 1.20 to 1.22 causes CodeQL to no longer detect that we built Go code

未关闭
#17,526 6 条评论 0 个 reaction 已指派 1 人 已被 @mbg 认领 在 GitHub 查看
Go question
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

We use CodeQL through GitHub Actions and had an issue with CodeQL no longer finding Go code when we updated Go from 1.20 to 1.22. Our build actually builds the Go toolset itself, so it's probably a little unusual.

Broken run with debug logs: https://github.com/microsoft/go/actions/runs/10920221364/job/30391782040

> CodeQL detected code written in Go but this run didn't build any of it

Example success with debug logs: https://github.com/microsoft/go/actions/runs/10934919945/job/30391982309

Both use:

```
"productName" : "CodeQL",
"vendor" : "GitHub",
"version" : "2.18.4",
"sha" : "9c5e434eb23805aa8a8574b87b24eae476ca8615",
"branches" : [
"codeql-cli-2.18.4"
],
```

The PR that triggered the broken run updated Go from 1.20.6 to 1.22.6. The example success *may* include some other changes, and I can produce a cleaner example if necessary, but I don't expect that anything important changed.

* Seemed related to this issue at first, but it was fixed and we still see this: https://github.com/github/codeql-action/issues/2467

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。