Skip to content

2. Monorepo codeql package#42

Merged
NEllusion merged 1 commit intov2from
monorepo-codeql-package
Oct 24, 2025
Merged

2. Monorepo codeql package#42
NEllusion merged 1 commit intov2from
monorepo-codeql-package

Conversation

@witmicko
Copy link
Contributor

@witmicko witmicko commented Oct 24, 2025

Migrated codeql-action

changes:

  • improved config handling to support multi languages
  • added tests

Note

Migrates to a monorepo with a reusable CodeQL workflow and a new CodeQL action supporting per-repo/per-language config, query suites, and tests.

  • Workflows
    • Reusable CodeQL: Adds /.github/workflows/reusable-codeql.yml with matrixed language scanning, inputs (languages, repo, etc.), and SARIF upload.
  • Packages
    • CodeQL Action: New packages/codeql-action/ with action.yaml, config generator (scripts/generate-config.js), validation utilities (src/validation.js), repo config loader (src/config-loader.js), EJS config template, query suites, and repo-specific configs (repo-configs/default.js, repo-configs/lll.js).
    • Tests: Adds Jest config and tests for config loading and input validation.
  • Repo Structure & Tooling
    • Convert to monorepo: updates root package.json (workspaces, scripts), adds shared configs/scripts (shared/configs/*, shared/scripts/*).
    • Housekeeping: update .gitignore, add .prettierignore, refactor Prettier config to shared/configs/prettier.config.js with .prettierrc.js importing it; minor .yarnrc.yml tweak.
  • Docs
    • Overhaul README.md with architecture, usage, config schema, and development instructions.
  • Removals
    • Remove legacy composite action.yaml and scripts scripts/check-ghas.js, scripts/log-to-mixpanel.js.

Written by Cursor Bugbot for commit 7f0b93c. This will update automatically on new commits. Configure here.

@witmicko witmicko requested a review from a team as a code owner October 24, 2025 14:52
cursor[bot]

This comment was marked as outdated.

@witmicko witmicko force-pushed the monorepo-codeql-package branch from 07b73a6 to 7f0b93c Compare October 24, 2025 14:56
@witmicko witmicko changed the title Monorepo codeql package 2. Monorepo codeql package Oct 24, 2025
@NEllusion NEllusion changed the base branch from v2 to monorepo-initial-structure-migration October 24, 2025 15:47
@witmicko witmicko changed the base branch from monorepo-initial-structure-migration to main October 24, 2025 15:53
@witmicko witmicko changed the base branch from main to v2 October 24, 2025 15:55
@NEllusion
Copy link
Contributor

Switching the base branch to filter out the commits that are related to #41

@NEllusion NEllusion changed the base branch from v2 to monorepo-initial-structure-migration October 24, 2025 15:59
Base automatically changed from monorepo-initial-structure-migration to v2 October 24, 2025 16:02
@@ -0,0 +1,29 @@
const config = {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just curious: What does the filename LLL stand for?

@NEllusion NEllusion merged commit 24dd8a6 into v2 Oct 24, 2025
8 of 11 checks passed
@NEllusion NEllusion deleted the monorepo-codeql-package branch October 24, 2025 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants