github / github/codeql

JS/TS Analyse 2.20.4 Runs Extremely Slow

Open
#18,736 8 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

Pipelines had been taking >90m to run the CodeQL `github/codeql-action/analyze@v3` step sicne 2.20.4. When reverting back to 2.20.3 via

```yaml
...
- name: "Initialize CodeQL"
uses: github/codeql-action/init@v3
with:
tools: https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.20.3/codeql-bundle-linux64.tar.zst
languages: javascript-typescript
...
```
the issue is resolved. It is difficult to see why this is happening, but in our case the codebase is large (`CodeQL scanned 8401 out of 8401 TypeScript files and 1568 out of 1569 JavaScript files in this invocation.`). Normal runtime for this job is about 10 minutes with 32 GB memory and 40 (32 effective) CPUs

Let me know if I can help resolve the issue by providing additional details about the codebase. I suspect something in particular about this codebase may be running inefficiently, as no other JS/TS scans within the enterprise have been impacted so far

Contributor guide

Open the contributing guide

Research direction

Start with the workflow's CodeQL init and analyze steps, reproducing the JavaScript/TypeScript scan with bundle 2.20.4 and comparing it with 2.20.3. Investigate the analysis performance for the reported 8,401 TypeScript and 1,569 JavaScript files; done means identifying the cause of the regression and returning runtime toward the usual 10 minutes.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, typescript
Domain
performance, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.