github / github/codeql

JS/TS Analyse 2.20.4 Runs Extremely Slow

未關閉
#18,736 8 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
question
主要語言
CodeQL
星號
10.1k
分支
2.1k
平均合併
2 天 15 小時
30 天內合併 PR
141

描述

Pipelines had been taking >90m to run the CodeQL `github/codeql-action/analyze@v3` step sicne 2.20.4. When reverting back to 2.20.3 via

```yaml
...
- name: "Initialize CodeQL"
uses: github/codeql-action/init@v3
with:
tools: https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.20.3/codeql-bundle-linux64.tar.zst
languages: javascript-typescript
...
```
the issue is resolved. It is difficult to see why this is happening, but in our case the codebase is large (`CodeQL scanned 8401 out of 8401 TypeScript files and 1568 out of 1569 JavaScript files in this invocation.`). Normal runtime for this job is about 10 minutes with 32 GB memory and 40 (32 effective) CPUs

Let me know if I can help resolve the issue by providing additional details about the codebase. I suspect something in particular about this codebase may be running inefficiently, as no other JS/TS scans within the enterprise have been impacted so far

貢獻指南

開啟貢獻指南

研究方向

Start with the workflow's CodeQL init and analyze steps, reproducing the JavaScript/TypeScript scan with bundle 2.20.4 and comparing it with 2.20.3. Investigate the analysis performance for the reported 8,401 TypeScript and 1,569 JavaScript files; done means identifying the cause of the regression and returning runtime toward the usual 10 minutes.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
javascript, typescript
領域
performance, security
Issue 類型
缺陷
難度
4/5
預估耗時
3-5 天
活躍度
停滯
描述清晰度
需要釐清
新手友好度
35/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。