for context: i tried to figure out if we can build the project just once in the CodeQL gh action - so i force pushed into the same pr testing the yml file.

before it was built twice, first with the explicit mvn call, then again with "autobuild"

i think we can if we build it *after* the CodeQL init, since CodeQL is monitoring what is happening in the gh action
https://github.com/apache/roller/pull/98/commits/22e090b5b2856e493b9e9c03777f040caf42550f


-michael


On 20.07.21 13:19, Michael Bien wrote:
please ignore the PR run failed warning mail - it was just a test.

-michael

On 19.07.21 14:03, Dave wrote:
There is a CodeQL CLI, but I've never used it
https://codeql.github.com/docs/codeql-cli/#codeql-cli

Dave

On Sun, Jul 18, 2021 at 7:02 AM Michael Bien <mbie...@gmail.com> wrote:

Hello,

does anyone know if there is a way to run the github CodeQL scan
locally? I was about to abuse a PR for that but then i thought there
must be a better way.

regards,

michael




Reply via email to