v2.21.1
Bugs fixed
- Fixed a bug in CodeQL analysis for GitHub Actions in the presence of a code scanning configuration file containing
paths-ignore
exclusion patterns but notpaths
inclusion patterns.
Previously, such a configuration incorrectly led to all YAML, HTML, JSON, and JS source files being extracted, except for those filtered bypaths-ignore
. This in turn led to performance issues on large codebases. Now, only workflow and Action metadata YAML files relevant to the GitHub Actions analysis will be extracted, except for those filtered bypaths-ignore
. This matches the default behavior when no configuration file is provided.
The handling ofpaths
inclusion patterns is unchanged: if provided, only those paths will be considered, except for those filtered bypaths-ignore
.
For more information about the changes included in this release, see the CodeQL CLI changelog.
You can download either the codeql-PLATFORM.zip
for your platform, or the generic codeql.zip
which contains binaries for all supported platforms. Please ignore the additional "source code" downloads below the .zip
artifacts.
This release is compatible with the CodeQL language packs from github/codeql@codeql-cli/v2.21.1
.