JS/TS Analyse 2.20.4 Runs Extremely Slow
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
Pipelines had been taking >90m to run the CodeQL `github/codeql-action/analyze@v3` step sicne 2.20.4. When reverting back to 2.20.3 via
```yaml
...
- name: "Initialize CodeQL"
uses: github/codeql-action/init@v3
with:
tools: https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.20.3/codeql-bundle-linux64.tar.zst
languages: javascript-typescript
...
```
the issue is resolved. It is difficult to see why this is happening, but in our case the codebase is large (`CodeQL scanned 8401 out of 8401 TypeScript files and 1568 out of 1569 JavaScript files in this invocation.`). Normal runtime for this job is about 10 minutes with 32 GB memory and 40 (32 effective) CPUs
Let me know if I can help resolve the issue by providing additional details about the codebase. I suspect something in particular about this codebase may be running inefficiently, as no other JS/TS scans within the enterprise have been impacted so far
貢獻指南
研究方向
Start with the workflow's CodeQL init and analyze steps, reproducing the JavaScript/TypeScript scan with bundle 2.20.4 and comparing it with 2.20.3. Investigate the analysis performance for the reported 8,401 TypeScript and 1,569 JavaScript files; done means identifying the cause of the regression and returning runtime toward the usual 10 minutes.
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- javascript, typescript
- 領域
- performance, security
- Issue 類型
- 缺陷
- 難度
- 4/5
- 預估耗時
- 3-5 天
- 活躍度
- 停滯
- 描述清晰度
- 需要釐清
- 新手友好度
- 35/100