Skip to content

Conversation

@GeekMasher
Copy link
Contributor

This pull request introduces several improvements focused on repository ownership, dependency management, and enhanced CodeQL integration for the VSCode extension. The most significant updates include assigning ownership to the appropriate team, adding automated dependency updates, refining command enablement logic based on CodeQL status, and extending the GitHub service to support dynamic API URLs and CodeQL status checks.

Repository ownership and dependency management:

  • Updated the .github/CODEOWNERS file to assign repository ownership to the @advanced-security/oss-maintainers team, replacing the previous owner.
  • Added a .github/dependabot.yml configuration to automate dependency updates for both GitHub Actions and npm packages, with weekly schedules, reviewer assignment, commit message prefixes, and dependency grouping.

VSCode extension enhancements:

  • Updated package.json to version 0.2.0 and improved command enablement logic so that key commands are only available when CodeQL is enabled, using the new codeql-scanner.codeQLEnabled context. Also refined command palette and context menu visibility conditions. [1] [2] [3] [4]

GitHub service improvements:

  • Enhanced the GitHubService class to allow updating the GitHub token with a configurable base URL, supporting enterprise or custom API endpoints.
  • Added a new method isCodeQLEnabled to GitHubService to check if CodeQL is enabled for a given repository, including robust logging and error handling.

Copilot AI review requested due to automatic review settings September 10, 2025 11:26
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This pull request introduces significant improvements to the VSCode extension, focusing on repository ownership, automated dependency management, and enhanced CodeQL integration with improved UI controls. The main purpose is to enhance the extension's usability by making commands conditional on CodeQL status and improving the user experience through better repository configuration management.

  • Updated repository ownership to the Advanced Security team and added automated dependency management
  • Enhanced command enablement logic to only show CodeQL commands when CodeQL is enabled for the repository
  • Extended GitHub service to support enterprise/custom API URLs and added CodeQL status checking functionality

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
.github/CODEOWNERS Updated repository ownership to @advanced-security/oss-maintainers team
.github/dependabot.yml Added automated dependency updates for GitHub Actions and npm packages
package.json Updated version to 0.2.0 and added CodeQL enablement conditions to commands
src/services/githubService.ts Enhanced with configurable base URL support and CodeQL status checking
src/providers/uiProvider.ts Added extensive CodeQL status checking, repository configuration UI, and improved error handling

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@GeekMasher GeekMasher merged commit 8f8c187 into main Sep 10, 2025
4 checks passed
@GeekMasher GeekMasher deleted the validation branch September 10, 2025 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants