Skip to content

Commit 885261b

Browse files
committed
Clean up README
Restructured the change to the README. Instead of directly including the descriptions of the language inputs, added links to the inputs for each action.
1 parent d5ec7f0 commit 885261b

File tree

1 file changed

+16
-21
lines changed

1 file changed

+16
-21
lines changed

README.md

Lines changed: 16 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -16,18 +16,24 @@ We recommend using default setup to configure CodeQL analysis for your repositor
1616

1717
You can also configure advanced setup for a repository to find security vulnerabilities in your code using a highly customizable code scanning configuration. For more information, see "[Configuring advanced setup for code scanning](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)" and "[Customizing your advanced setup for code scanning](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning)."
1818

19-
### Inputs
19+
### Actions
20+
21+
This repository contains several actions that enable you to create and upload your CodeQL analyses to GitHub Code Scanning. Also, you can upload analyses generated by any SARIF-producing SAST tool using actions in this repository.
22+
23+
Actions for CodeQL analyses:
24+
25+
- `init`: Sets up CodeQL for analysis. For information about input parameters, see the [init action definition](https://github.com/github/codeql-action/blob/main/init/action.yml).
26+
- `autobuild`: Attempts to automatically build the code. Only used for analyzing languages that require a build. For information about input parameters, see the [autobuild action definition](https://github.com/github/codeql-action/blob/main/autobuild/action.yml).
27+
- `analyze`: Finalizes the CodeQL database and runs the analysis. For information about input parameters, see the [analyze action definition](https://github.com/github/codeql-action/blob/main/analyze/action.yml).
28+
29+
Actions for uploading analyses generated by third-party tools:
2030

21-
The CodeQL Action supports various inputs to customize the analysis. Here are some important inputs:
31+
- `upload-sarif`: Uploads a SARIF file to Code Scanning. For information about input parameters, see the [upload-sarif action definition](https://github.com/github/codeql-action/blob/main/upload-sarif/action.yml).
2232

23-
- `config`: Path of the config file to use. This input allows you to specify a custom configuration file for the analysis.
24-
- `languages`: A comma-separated list of CodeQL languages to analyze.
25-
- `queries`: Comma-separated list of additional queries to run. By default, this overrides the same setting in a configuration file; prefix with "+" to use both sets of queries.
26-
- `packs`: Comma-separated list of packs to run. Reference a pack in the format `scope/name[@version]`. If `version` is not specified, then the latest version of the pack is used. By default, this overrides the same setting in a configuration file; prefix with "+" to use both sets of packs.
27-
- `db-location`: Path where CodeQL databases should be created. If not specified, a temporary directory will be used.
28-
- `ram`: The amount of memory in MB that can be used by CodeQL extractors.
29-
- `threads`: The number of threads that can be used by CodeQL extractors.
30-
- `source-root`: Path of the root source code directory, relative to $GITHUB_WORKSPACE.
33+
Actions with special purposes and unlikely to be used directly:
34+
35+
- `resolve-environment`: Attempts to infer a build environment suitable for automatic builds. For information about input parameters, see the [resolve-environment action definition](https://github.com/github/codeql-action/blob/main/resolve-environment/action.yml).
36+
- `start-proxy`: Starts an HTTP proxy server for downloading dependencies in private registries. For information about input parameters, see the [start-proxy action definition](https://github.com/github/codeql-action/blob/main/start-proxy/action.yml).
3137

3238
### Workflow Permissions
3339

@@ -41,17 +47,6 @@ The CodeQL Action supports different build modes for analyzing the source code.
4147
- `autobuild`: The database will be created by attempting to automatically build the source code. Available for all compiled languages.
4248
- `manual`: The database will be created by building the source code using a manually specified build command. To use this build mode, specify manual build steps in your workflow between the `init` and `analyze` steps. Available for all compiled languages.
4349

44-
### Actions
45-
46-
The CodeQL Action includes several actions that can be used in your workflows. Here are the available actions and how to use them:
47-
48-
- `init`: Sets up CodeQL for analysis. For more information, see the [init action documentation](https://github.com/github/codeql-action/blob/main/init/action.yml).
49-
- `autobuild`: Attempts to automatically build the code. For more information, see the [autobuild action documentation](https://github.com/github/codeql-action/blob/main/autobuild/action.yml).
50-
- `analyze`: Finalizes the CodeQL database and runs the analysis. For more information, see the [analyze action documentation](https://github.com/github/codeql-action/blob/main/analyze/action.yml).
51-
- `upload-sarif`: Uploads a SARIF file to Code Scanning. For more information, see the [upload-sarif action documentation](https://github.com/github/codeql-action/blob/main/upload-sarif/action.yml).
52-
- `resolve-environment`: Attempts to infer a build environment suitable for automatic builds. For more information, see the [resolve-environment action documentation](https://github.com/github/codeql-action/blob/main/resolve-environment/action.yml).
53-
- `start-proxy`: Starts an HTTP proxy server. For more information, see the [start-proxy action documentation](https://github.com/github/codeql-action/blob/main/start-proxy/action.yml).
54-
5550
## Supported versions of the CodeQL Action
5651

5752
The following versions of the CodeQL Action are currently supported:

0 commit comments

Comments
 (0)