github / github/codeql

False positive — CodeQL failing due to lack of Python files when they only exist on the `main` branch

Ouverte
#21,106 4 commentaires 1 réaction 0 personnes assignées Voir sur GitHub
acknowledged bug false-positive
Langage dominant
CodeQL
Étoiles
10.1k
Forks
2.1k
Merge moyen
2 j 15 h
PR mergées (30 j)
141

Description

**Description of the false positive**

Hi, I encountered a weird issue with CodeQL. My pull request is based on a slightly older version of the codebase, which did not have any Python files. However, there is now a single Python file in `main`. CodeQL runs, but fails due to lack of Python files, which blocks a perfectly valid PR.

Unfortunately, the code is private, so I am not able to share the repository, but the `main` branch contains a Python script in `scripts/`, while the PR version of the codebase doesn't.

The exact error is
```
/opt/hostedtoolcache/CodeQL/2.23.8/x64/codeql/codeql database finalize --finalize-dataset --threads=2 --ram=6920 /home/runner/work/_temp/codeql_databases/python
CodeQL detected code written in C/C++, Swift, GitHub Actions and Java/Kotlin, but not any written in Python. Confirm that there is some source code for Python in the project. For more information, review our troubleshooting guide at https://gh.io/troubleshooting-code-scanning/no-source-code-seen-during-build .
Error: Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.23.8/x64/codeql/codeql database finalize --finalize-dataset --threads=2 --ram=6920 /home/runner/work/_temp/codeql_databases/python". Exit code was 32 and last log line was: CodeQL detected code written in C/C++, Swift, GitHub Actions and Java/Kotlin, but not any written in Python. Confirm that there is some source code for Python in the project. For more information, review our troubleshooting guide at https://gh.io/troubleshooting-code-scanning/no-source-code-seen-during-build . See the logs for more details.
```

I don't believe that CodeQL should be configured to run on file types that do not exist on a given branch. This can be fixed in a pretty simple way — rebasing the branch on top of HEAD, but still, I don't believe this should be a cause for failure in the first place.

Guide de contribution

Ouvrir le guide de contribution

Piste de recherche

Reproduisez l’échec avec une pull request dont la base précédente ne contient pas Python, tandis que main contient un script dans scripts/. Commencez par l’erreur de finalisation de la base de données CodeQL et le guide de dépannage lié concernant no-source-code ; le travail est terminé lorsqu’une pull request valide n’échoue pas uniquement parce que Python n’existe que sur main.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Domaine
security
Type d'issue
Bug
Difficulté
4/5
Temps estimé
3-5 jours
Activité
À l'abandon
Clarté
À clarifier
Accessibilité débutants
25/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.