Commitb66391a

committed

Favor GITHUB_WORKFLOW_REF

Introduced with GHES 3.9:https://docs.github.com/en/enterprise-server@3.9/actions/learn-github-actions/variablesGITHUB_WORKFLOW_REF means that actions don't need to use `actions: read`to determine the path to the running workflow.

1 parentc79c360 commitb66391aCopy full SHA for b66391a

File tree

+26

-1

lines changed

+26

-1

lines changed

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
@@ -8,6 +8,7 @@ Note that the only difference between `v2` and `v3` of the CodeQL Action is the
`8`	`8`
`9`	`9`	`- Update default CodeQL bundle version to 2.16.2.[#2124](https://github.com/github/codeql-action/pull/2124)`
`10`	`10`	`- The CodeQL action no longer fails if it can't write to the telemetry api endpoint.[#2121](https://github.com/github/codeql-action/pull/2121)`
	`11`	+- Users of GHES3.9+ and GHEC will no longer need to include`actions: read` permissions to use`upload-sarif` in private repositories.
`11`	`12`
`12`	`13`	`##3.24.0 - 02 Feb 2024`
`13`	`14`

Lines changed: 12 additions & 0 deletions

Some generated files are not rendered by default. Learn more aboutcustomizing how changed files appear on GitHub.

Lines changed: 1 addition & 1 deletion

Some generated files are not rendered by default. Learn more aboutcustomizing how changed files appear on GitHub.

Lines changed: 12 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -119,6 +119,18 @@ export async function getGitHubVersion(): Promise<GitHubVersion> {`
`119`	`119`	`* Get the path of the currently executing workflow relative to the repository root.`
`120`	`120`	`*/`
`121`	`121`	`exportasyncfunctiongetWorkflowRelativePath():Promise<string>{`
	`122`	`+constworkflow_ref=process.env["GITHUB_WORKFLOW_REF"];`
	`123`	`+// When GHES 3.8 support is removed, this if guard and its corresponding`
	`124`	`+// fallback code can be removed.`
	`125`	`+if(workflow_ref!==undefined){`
	`126`	`+constworkflowRegExp=newRegExp("^[^/]+/[^/]+/(.?)@.");`
	`127`	`+constmatch=workflow_ref.match(workflowRegExp);`
	`128`	`+if(match){`
	`129`	`+returnnewPromise((resolve)=>{`
	`130`	`+resolve(match[1]);`
	`131`	`+});`
	`132`	`+}`
	`133`	`+}`
`122`	`134`	`constrepo_nwo=getRequiredEnvParam("GITHUB_REPOSITORY").split("/");`
`123`	`135`	`constowner=repo_nwo[0];`
`124`	`136`	`constrepo=repo_nwo[1];`

Comments

(0)