Skip to content

Commit 1cd6a03

Browse files
SifatAli008SifatAli008
committed
fix: resolve CodeQL workflow errors and analysis issues
- Fix duplicate language matrix error (JavaScript includes TypeScript) - Replace problematic CodeQL workflow with simplified version - Add mock environment variables for CI build process - Remove custom CodeQL config that was causing validation issues - Use autobuild for better compatibility with Next.js projects - Add proper timeout and error handling for analysis steps Fixes: - DuplicateLanguageInMatrix error in CodeQL workflow - TypeScript/JavaScript analysis build failures - Environment variable validation errors in CI builds - CodeQL configuration validation issues The new simplified workflow uses CodeQL's autobuild feature and standard security queries for better reliability.
1 parent add45d7 commit 1cd6a03

File tree

3 files changed

+83
-18
lines changed

3 files changed

+83
-18
lines changed

‎.github/workflows/ci.yml‎

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -119,16 +119,18 @@ jobs:
119119
- name: Install dependencies
120120
run: npm ci
121121

122+
- name: Create mock environment for build
123+
run: |
124+
echo "NEXT_PUBLIC_FIREBASE_API_KEY=mock-api-key" > .env.local
125+
echo "NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=mock.firebaseapp.com" >> .env.local
126+
echo "NEXT_PUBLIC_FIREBASE_PROJECT_ID=mock-project" >> .env.local
127+
echo "NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=mock.firebasestorage.app" >> .env.local
128+
echo "NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=123456789" >> .env.local
129+
echo "NEXT_PUBLIC_FIREBASE_APP_ID=1:123456789:web:abcdef123456" >> .env.local
130+
echo "NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID=G-XXXXXXXXXX" >> .env.local
131+
122132
- name: Build application
123133
run: npm run build
124-
env:
125-
NEXT_PUBLIC_FIREBASE_API_KEY: ${{ secrets.NEXT_PUBLIC_FIREBASE_API_KEY }}
126-
NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN: ${{ secrets.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN }}
127-
NEXT_PUBLIC_FIREBASE_PROJECT_ID: ${{ secrets.NEXT_PUBLIC_FIREBASE_PROJECT_ID }}
128-
NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET: ${{ secrets.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET }}
129-
NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID: ${{ secrets.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID }}
130-
NEXT_PUBLIC_FIREBASE_APP_ID: ${{ secrets.NEXT_PUBLIC_FIREBASE_APP_ID }}
131-
NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID: ${{ secrets.NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID }}
132134

133135
- name: Upload build artifacts
134136
uses: actions/upload-artifact@v4

.github/workflows/codeql.yml renamed to .github/workflows/codeql-simple.yml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,18 @@
1-
name: "CodeQL Security Analysis"
1+
name: "CodeQL Security Scan"
22

33
on:
44
push:
5-
branches: [ main, develop ]
5+
branches: [ main ]
66
pull_request:
77
branches: [ main ]
88
schedule:
9-
- cron: '0 2 * * 1' # Run every Monday at 2 AM UTC
9+
- cron: '0 6 * * 1' # Run every Monday at 6 AM UTC
1010

1111
jobs:
1212
analyze:
13-
name: Analyze Code
13+
name: Analyze
1414
runs-on: ubuntu-latest
15+
timeout-minutes: 360
1516
permissions:
1617
actions: read
1718
contents: read
@@ -20,7 +21,7 @@ jobs:
2021
strategy:
2122
fail-fast: false
2223
matrix:
23-
language: [ 'javascript', 'typescript' ]
24+
language: [ 'javascript' ]
2425

2526
steps:
2627
- name: Checkout repository
@@ -30,7 +31,8 @@ jobs:
3031
uses: github/codeql-action/init@v3
3132
with:
3233
languages: ${{ matrix.language }}
33-
config-file: ./.github/codeql/codeql-config.yml
34+
# Use default queries for better compatibility
35+
queries: security-extended
3436

3537
- name: Setup Node.js
3638
uses: actions/setup-node@v4
@@ -41,10 +43,8 @@ jobs:
4143
- name: Install dependencies
4244
run: npm ci
4345

44-
- name: Build application
45-
run: npm run build
46-
env:
47-
SKIP_ENV_VALIDATION: true
46+
- name: Autobuild
47+
uses: github/codeql-action/autobuild@v3
4848

4949
- name: Perform CodeQL Analysis
5050
uses: github/codeql-action/analyze@v3

‎.github/workflows/codeql.yml.disabled‎

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,63 @@
1+
name: "CodeQL Security Analysis"
2+
3+
on:
4+
push:
5+
branches: [ main, develop ]
6+
pull_request:
7+
branches: [ main ]
8+
schedule:
9+
- cron: '0 2 * * 1' # Run every Monday at 2 AM UTC
10+
11+
jobs:
12+
analyze:
13+
name: Analyze Code
14+
runs-on: ubuntu-latest
15+
permissions:
16+
actions: read
17+
contents: read
18+
security-events: write
19+
20+
strategy:
21+
fail-fast: false
22+
matrix:
23+
language: [ 'javascript' ] # TypeScript is included in JavaScript analysis
24+
25+
steps:
26+
- name: Checkout repository
27+
uses: actions/checkout@v4
28+
29+
- name: Initialize CodeQL
30+
uses: github/codeql-action/init@v3
31+
with:
32+
languages: ${{ matrix.language }}
33+
queries: security-and-quality
34+
35+
- name: Setup Node.js
36+
uses: actions/setup-node@v4
37+
with:
38+
node-version: '18'
39+
cache: 'npm'
40+
41+
- name: Install dependencies
42+
run: npm ci
43+
44+
- name: Create mock environment file
45+
run: |
46+
echo "NEXT_PUBLIC_FIREBASE_API_KEY=mock-key" > .env.local
47+
echo "NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=mock-domain" >> .env.local
48+
echo "NEXT_PUBLIC_FIREBASE_PROJECT_ID=mock-project" >> .env.local
49+
echo "NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=mock-bucket" >> .env.local
50+
echo "NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=123456" >> .env.local
51+
echo "NEXT_PUBLIC_FIREBASE_APP_ID=mock-app-id" >> .env.local
52+
echo "NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID=mock-measurement" >> .env.local
53+
54+
- name: Build application for analysis
55+
run: npm run build
56+
env:
57+
NODE_ENV: production
58+
continue-on-error: true
59+
60+
- name: Perform CodeQL Analysis
61+
uses: github/codeql-action/analyze@v3
62+
with:
63+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)