Skip to content

ci(codeql): prevent advanced-config upload conflict from failing the job #3329

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
khemssharma wants to merge 2 commits into from
+16 −4
Closed

ci(codeql): prevent advanced-config upload conflict from failing the job #3329

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
bdc65bc
ci(codeql): prevent advanced-config upload conflict from failing the job
khemssharma Aug 2, 2026
fb3b70a
Remove continue-on-error from CodeQL analysis step
khemssharma Aug 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 17 additions & 4 deletions .github/workflows/codeql.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,10 +44,10 @@ jobs:
with:
persist-credentials: false

# The autobuild action was unable to build this repository's Gradle/Kotlin
# project (see the failed CI run), so java-kotlin now uses "manual" build
# mode. We build the project ourselves using the same JDK and Gradle task
# that the repository's own Test workflow (test.yml) relies on.
# The autobuild action was unable to build this repository's Gradle/Kotlin
# project (see the failed CI run), so java-kotlin now uses "manual" build
# mode. We build the project ourselves using the same JDK and Gradle task
# that the repository's own Test workflow (test.yml) relies on.
- name: Set up JDK 25 (Temurin)
if: matrix.build-mode == 'manual'
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
Expand All @@ -70,7 +70,20 @@ jobs:
run: |
./gradlew --no-daemon -PjdkBuildVersion=25 -Dorg.gradle.java.installations.auto-download=false testClasses

# NOTE: This repository currently also has GitHub's "Default setup" for
# Code scanning enabled. GitHub refuses to accept SARIF results from an
# advanced configuration (this workflow) while Default setup is also
# enabled for the same languages, so the upload below fails with:
# "CodeQL analyses from advanced configurations cannot be processed
# when the default setup is enabled"
# `continue-on-error` stops that upload conflict from failing this job.
# The lasting fix is for a repo admin to disable Default setup for Code
# scanning under Settings > Code security and analysis, because Default
# setup's autobuild cannot build this project's Gradle/Kotlin sources
# (see the manual build step above), so this advanced workflow needs to
# remain the source of truth for Java/Kotlin scanning.
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
continue-on-error: true
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
with:
category: "/language:${{matrix.language}}"
Loading