fix: update codeql workflow for python build mode and analysis

AI-Generated: true
AI-Model: claude-3.7-sonnet

Author: AtomicFS

.github/workflows/codeql.yml

@@ -43,7 +43,7 @@ jobs:
           - language: javascript-typescript
             build-mode: none
           - language: python
-            build-mode: manual
+            build-mode: none
         # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
         # Use `c-cpp` to analyze code written in C, C++ or both
         # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
@@ -88,9 +88,23 @@ jobs:
         uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
-          build-mode: ${{ matrix.build-mode }}
+          build-mode: none
           source-root: ./.dagger-ci
 
+      # Run another Python script after CodeQL initialization to ensure it captures the code
+      - name: Run Python code after CodeQL init
+        if: ${{ matrix.language == 'python' }}
+        run: |
+          cd ./.dagger-ci
+          # Create a simple script that exercises the code
+          echo "import os" > run_code.py
+          echo "for root, dirs, files in os.walk('.'):" >> run_code.py
+          echo "    for file in files:" >> run_code.py
+          echo "        if file.endswith('.py') and not file in ['run_code.py', 'import_all.py']:" >> run_code.py
+          echo "            print(f'Processing {os.path.join(root, file)}')" >> run_code.py
+          # Run the script
+          python run_code.py
+
           # If you wish to specify custom queries, you can do so here or in a config file.
           # By default, queries listed here will override any specified in a config file.
           # Prefix the list here with "+" to use these queries and those in the config file.
@@ -99,16 +113,29 @@ jobs:
           # https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
           # queries: security-extended,security-and-quality
 
-      # Build Python code for CodeQL analysis
-      - name: Build Python code for CodeQL analysis
+      # Prepare Python code for CodeQL analysis
+      - name: Prepare Python code for CodeQL analysis
         if: ${{ matrix.language == 'python' }}
         run: |
           # Change to the Python source directory
           cd ./.dagger-ci
-          # Run a simple Python command to make sure CodeQL sees the code
+          # Run a simple Python command to make sure files are accessed
           python -m compileall .
           # List all Python files to ensure they're visible
           find . -name "*.py" | sort
+          # Create a simple script that imports all modules to ensure they're loaded
+          echo "import os, sys" > import_all.py
+          echo "for root, dirs, files in os.walk('.'):" >> import_all.py
+          echo "    for file in files:" >> import_all.py
+          echo "        if file.endswith('.py') and not file == 'import_all.py':" >> import_all.py
+          echo "            module = os.path.join(root, file)[2:-3].replace('/', '.')" >> import_all.py
+          echo "            try:" >> import_all.py
+          echo "                print(f'Importing {module}')" >> import_all.py
+          echo "                __import__(module)" >> import_all.py
+          echo "            except Exception as e:" >> import_all.py
+          echo "                print(f'Failed to import {module}: {e}')" >> import_all.py
+          # Run the import script
+          python import_all.py
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3