CodeQL fails to detect Javascript/Typescript files

未关闭

#3,384 创建于 2026年1月5日 0 条评论 3 个 reaction 已指派 0 人在 GitHub 查看

还没有人认领这个 Issue。

评估

难度: 4/5
预计耗时: 3-5 天
新手友好度: 38/100

Issue 类型: 缺陷
描述清晰度: 基本清楚
活跃度: 停滞
技术栈: github-actions, typescript
领域: ci-cd, security

调研方向

从链接的工作流日志开始，将默认和高级 CodeQL 分析的行为与存储库的 .github/codeql/codeql-config.yml 进行比较，尤其是其中的 paths 设置。检查分析步骤如何处理存储库根目录之外的两个 TypeScript 文件；完成应意味着文档所述的配置或默认配置能够可靠地找到它们，而不需要 workaround。

由索引模型根据 Issue 内容生成。

描述

I was trying to get CodeQL running on the following repo:

https://github.com/jessehouwing/azure-pipelines-msbuild-helper-task/tree/a3aeaf4b459f1912ccf4706d0e0c93a16a4d5ed0

But Code QL analysis fails to find any Javascript / Typescript files. Neither in "default mode" nor in "advanced mode".

[2026-01-05 08:48:07] [build-stderr] Only found JavaScript or TypeScript files that were empty or contained syntax errors.

A workflow log can be found here:
https://github.com/jessehouwing/azure-pipelines-msbuild-helper-task/actions/runs/20710231226/job/59448894856

It is unclear from the error message and from the docs why i can't find any files, because there are 2 Typescript files in the repo, but they aren't in the root (which I suspect is causing the issue).

I managed to resolve this by adding a codeql-config.yml and specifying the paths property to include **/*.ts:

https://github.com/jessehouwing/azure-pipelines-msbuild-helper-task/blob/main/.github/codeql/codeql-config.yml

I don't see why I would have to do this. CodeQL should detect **/*.js, **/*.ts and a few other extensions by default if you'd ask me.

Either the docs should clearly specify how do solve this situation (the docs currently do not contain an entry for this specific error message). But it would be even better if the analysis step would pick a decent set of default search options when it can't find a project.json in the root of the repo.

主要语言: TypeScript
星标: 1.6k
派生: 493
平均合并: 1 天 13 小时
30 天内合并 PR: 44