github / github/codeql

Unable to validate code scanning workflow: error: getWorkflow() failed

Offen
#18,279 8 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
question
Vorherrschende Sprache
CodeQL
Sterne
10.1k
Forks
2.1k
Ø Merge
2 T. 15 Std.
Gemergte PRs (30 T.)
141

Beschreibung

When I run my build it includes this step:

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
source-root: source/my-app
queries: security-extended

I'm getting this warning:

> Initialize CodeQL
> Unable to validate code scanning workflow: error: getWorkflow() failed: Error: Expected to find a code scanning workflow file at /home/runner/work/My-Repo-Name/My-Repo-Name/.github/workflows/ci-build.yml, but no such file existed. This can happen if the currently running workflow checks out a branch that doesn't contain the corresponding workflow file.

But the repo isn't being checked out to the root of the directory, as explained in `source-root`. Is there any way of telling CodeQL to look in the subdirectory to find the workflow?

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

Inspect .github/workflows/ci-build.yml and the workflow invocation around github/codeql-action/init@v3; first reproduce the warning with source-root: source/my-app and the checked-out repository layout. Trace how the action locates and validates the workflow, then verify whether subdirectory lookup is supported and what behavior should be documented or tested.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
github-actions
Bereich
ci-cd, security
Issue-Typ
Bug
Schwierigkeit
4/5
Geschätzter Aufwand
3-5 Tage
Aktivitätsstatus
Veraltet
Klarheit
Größtenteils klar
Anfängerfreundlichkeit
32/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.