github / github/codeql

Unable to validate code scanning workflow: error: getWorkflow() failed

Aperta
#18,279 8 commenti 0 reazioni 0 assegnatari Vedi su GitHub
question
Lingua principale
CodeQL
Stelle
10.1k
Fork
2.1k
Merge medio
2g 15h
PR unite (30g)
141

Descrizione

When I run my build it includes this step:

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
source-root: source/my-app
queries: security-extended

I'm getting this warning:

> Initialize CodeQL
> Unable to validate code scanning workflow: error: getWorkflow() failed: Error: Expected to find a code scanning workflow file at /home/runner/work/My-Repo-Name/My-Repo-Name/.github/workflows/ci-build.yml, but no such file existed. This can happen if the currently running workflow checks out a branch that doesn't contain the corresponding workflow file.

But the repo isn't being checked out to the root of the directory, as explained in `source-root`. Is there any way of telling CodeQL to look in the subdirectory to find the workflow?

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Inspect .github/workflows/ci-build.yml and the workflow invocation around github/codeql-action/init@v3; first reproduce the warning with source-root: source/my-app and the checked-out repository layout. Trace how the action locates and validates the workflow, then verify whether subdirectory lookup is supported and what behavior should be documented or tested.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
github-actions
Ambito
ci-cd, security
Tipo di issue
Bug
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Ferma
Chiarezza
Abbastanza chiara
Idoneità per principianti
32/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.