Hacktoberfest 2026：メンテナが10月に向けて印を付けた、オープンで初心者向けの issue。 Hacktoberfest の issue を見る

start-proxy selects an AMD64 binary on Linux ARM64

オープン
  • 何か問題がありますか？
#4,173 コメント 1 件 リアクション 0 件 担当者 0 名 GitHub で見る

メンテナーはふだん 1 日以内に返信

まだ誰も着手していません。

評価

難易度
4/5
見積もり時間
3〜5日
初心者へのやさしさ
48/100
issue の種類
機能追加
明瞭さ
おおむね明確
活発さ
活発
技術スタック
github-actions, typescript
領域
devops, tooling

調査の方向性

Read getProxyPackage() and getDownloadUrl() in src/start-proxy.ts, then inspect the existing proxy release assets and fallback behavior. Determine whether a native Linux ARM64 artifact exists or whether unsupported architectures must fail explicitly. Done means Linux x64 and arm64 selection and fallback behavior are covered by tests, with a clear diagnostic when no compatible artifact is available.

索引モデルが issue の本文から書いたものです。

説明

Problem

The CodeQL CLI now has native Linux ARM64 support in beta, but the managed private-registry proxy still selects and downloads an AMD64 executable on Linux ARM64. This prevents the proxy from running natively even when CodeQL analysis itself can run.

This report concerns the proxy artifact and architecture selection, not generic CodeQL CLI ARM64 support, registry credentials, custom CA certificates, or outbound network access.

Source and public release evidence

Source inspected on September 25, 2026: fa8392b7e54a5d74a53270a4aa7defa307aa415c.

  • getProxyPackage() selects by process.platform only. Every Linux host receives update-job-proxy-linux64.tar.gz; process.arch is not checked.
  • getDownloadUrl() looks for that filename in the CodeQL bundle release, then falls back to the hard-coded v2.22.0 release.
  • The v2.27.0 release contains a native codeql-bundle-linux-arm64 CLI bundle, but the proxy assets are only linux64, osx64, and win64.
  • Fresh inspection of both Linux proxy archives below found ELF e_machine=62 (EM_X86_64), not 183 (EM_AARCH64). Downloaded archive hashes match the digests returned by the GitHub Releases API.
Proxy release ELF architecture Archive SHA-256
v2.27.0 AMD64 / e_machine=62 77197411d8fe7c6d157f694e2e4edd6b94bf7d9d10c667864cd6a113c31f97b2
v2.22.0 fallback AMD64 / e_machine=62 caed6d4ad41849570f6c62f784f20f9414a82738b120f464d7fcad1640f7900b

Public-only reproduction

This inspects public artifacts without executing them, extracting them to disk, accessing a private registry, or requiring credentials. It can run on any host with curl and Python 3; the affected execution platform is native Linux ARM64 without x86 emulation.

for version in 2.27.0 2.22.0; do
  curl --fail --silent --show-error --location \
    "https://github.com/github/codeql-action/releases/download/codeql-bundle-v${version}/update-job-proxy-linux64.tar.gz" \
    -o "proxy-v${version}.tar.gz" || exit 1
done

python3 - <<'PY'
import tarfile
from pathlib import Path

for version in ("2.27.0", "2.22.0"):
    with tarfile.open(f"proxy-v{version}.tar.gz", "r:gz") as archive:
        members = [
            member for member in archive.getmembers()
            if member.isfile() and Path(member.name).name == "update-job-proxy"
        ]
        assert len(members) == 1
        header = archive.extractfile(members[0]).read(64)
        assert header[:4] == b"\x7fELF"
        assert header[5] in (1, 2)
        byteorder = "little" if header[5] == 1 else "big"
        machine = int.from_bytes(header[18:20], byteorder)
        print(f"{version}: ELF e_machine={machine} (62=AMD64, 183=AArch64)")
PY

Actual output:

2.27.0: ELF e_machine=62 (62=AMD64, 183=AArch64)
2.22.0: ELF e_machine=62 (62=AMD64, 183=AArch64)

Native-run observation and impact

A September 21, 2026 managed CodeQL run on native Linux ARM64, Ubuntu 26.04.1, with CLI 2.27.0 uploaded analyses successfully, but its local registry-proxy connection tests failed with ECONNREFUSED; proxy cleanup reported ESRCH. This earlier runtime observation is separate from the fresh public-artifact inspection above; no new managed scan was triggered for this report.

Successful analysis upload therefore did not establish successful private-dependency resolution. The architecture mismatch can be verified independently of that runner OS version and of any particular private registry. An x64 runner remains the workaround for this proxy path.

Expected behavior

Select a native Linux ARM64 proxy artifact when process.arch === "arm64", including an architecture-compatible fallback. Until such an artifact is available, fail early with an explicit unsupported-architecture diagnostic rather than attempting to start the AMD64 executable. Tests should cover Linux x64 and arm64 selection and fallback behavior.

Could the maintainers confirm whether private-registry proxy support is intended to be part of Linux ARM64 CodeQL support, or whether this remains an unsupported combination that should be documented explicitly?

Related, but distinct

#3530 and #3531 address proxy startup retries and false-success/readiness reporting. They may explain why a dead proxy is not surfaced clearly, but they do not add an ARM64 proxy artifact or change architecture selection. This report tracks that architecture gap separately.

主要言語
TypeScript
スター
1.6k
フォーク
493
平均マージ
1日 10時間
マージ済み PR（30日）
52

環境構築

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

github/codeql-action のほかの issue

github/codeql-action の issue をすべて見る

似ている issue

TypeScript の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。