github / github/codeql

Autobuild does not find maven build (pom.xml) files in subdirs

Abierto
#5,331 1 comentario 0 reacciones 0 asignados Ver en GitHub
question
Lenguaje dominante
CodeQL
Estrellas
10.1k
Forks
2.1k
Merge medio
2 d 15 h
PR fusionados (30 d)
141

Descripción

**Description of the issue**
I have a repo with multiple Java maven projects. The default codeql-analysis.yml file looks like this:
```
jobs:
...
steps:
...
- name: Autobuild
uses: github/codeql-action/autobuild@v1
...
```
Github's advanced security workflow reports that it cannot find a suitable source file to build when pom.xml files are not in the root of the repo: ```ERROR: Could not detect a suitable build command for the source checkout.```

Is that expected?

**Workaround**
I can change it to use the find utility to search for pom.xml files and run the package goal:
```
jobs:
...
steps:
...
- if: matrix.language != 'java'
name: Autobuild
uses: github/codeql-action/autobuild@v1

- if: matrix.language == 'java'
name: Build Java
run: |
find . -name pom.xml -exec mvn -f {} package \;
...
```

**My Ask**
If that is expected, then I'm asking for an enhancement request to the autobuilder to search for pom.xml files.

Either way, I request Github doc be updated to show a solution like above for this, IMO, very common scenario.

Thanks!

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.