advanced-security · mbaluda · Jun 5, 2024 · May 29, 2024 · May 29, 2024 · May 29, 2024
diff --git a/.github/workflows/code_scanning.yml b/.github/workflows/code_scanning.yml
@@ -12,6 +12,7 @@ on:
 
 env:
   LGTM_INDEX_XML_MODE: all
+  LGTM_INDEX_FILETYPES: ".json:JSON"
 
 jobs:
   analyze:
@@ -54,19 +55,16 @@ jobs:
             -o "$cds_file.json"
         done
 
-    # Initializes the CodeQL tools for scanning.
-    - name: Extract version from qlt.conf.json
-      uses: sergeysova/jq-action@v2
-      id: version
-      with:
-        cmd: 'jq .CodeQLCLIBundle qlt.conf.json -r'
+    - name: Extract CodeQL bundle version from qlt.conf.json
+      run: |
+        echo "BUNDLE_VERSION=$(jq .CodeQLCLIBundle qlt.conf.json -r)" >> $GITHUB_ENV
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3
       with:
         languages: javascript
         config-file: ./.github/codeql/codeql-config.yaml
-        tools: https://github.com/github/codeql-action/releases/download/${{steps.version.outputs.value}}/codeql-bundle-linux64.tar.gz
+        tools: https://github.com/github/codeql-action/releases/download/${{env.BUNDLE_VERSION}}/codeql-bundle-linux64.tar.gz
         debug: true
 
     - name: Perform CodeQL Analysis

diff --git a/.github/workflows/javascript.sarif.expected b/.github/workflows/javascript.sarif.expected
diff --git a/.github/workflows/run-codeql-unit-tests-javascript.yml b/.github/workflows/run-codeql-unit-tests-javascript.yml
@@ -104,7 +104,7 @@ jobs:
           CODEQL_STDLIB_IDENT: ${{matrix.codeql_standard_library_ident}}
           RUNNER_TMP: ${{ runner.temp }}
           LGTM_INDEX_XML_MODE: all
-          LGTM_INDEX_FILTERS: "include:**/*.json"
+          LGTM_INDEX_FILETYPES: ".json:JSON"
 
         shell: bash
         run: >
@@ -147,4 +147,4 @@ jobs:
         run: |
           qlt test run validate-unit-tests --pretty-print --results-directory . >> $GITHUB_STEP_SUMMARY
           qlt test run validate-unit-tests --results-directory .
-
+          
diff --git a/...ion-with-service1-protocol-none/README.md → ...njection-service1-protocol-none/README.md b/...ion-with-service1-protocol-none/README.md → ...njection-service1-protocol-none/README.md
diff --git a/...with-service1-protocol-none/db/schema.cds → ...tion-service1-protocol-none/db/schema.cds b/...with-service1-protocol-none/db/schema.cds → ...tion-service1-protocol-none/db/schema.cds
diff --git a/...tion-with-service1-protocol-none.expected → ...tion-with-service1-protocol-none.expected b/...tion-with-service1-protocol-none.expected → ...tion-with-service1-protocol-none.expected
diff --git a/...jection-with-service1-protocol-none.qlref → ...jection-with-service1-protocol-none.qlref b/...jection-with-service1-protocol-none.qlref → ...jection-with-service1-protocol-none.qlref
diff --git a/...injection-with-service1-protocol-none.svg → ...injection-with-service1-protocol-none.svg b/...injection-with-service1-protocol-none.svg → ...injection-with-service1-protocol-none.svg
diff --git a/...-with-service1-protocol-none/package.json → ...ction-service1-protocol-none/package.json b/...-with-service1-protocol-none/package.json → ...ction-service1-protocol-none/package.json
diff --git a/...ion-with-service1-protocol-none/server.js → ...njection-service1-protocol-none/server.js b/...ion-with-service1-protocol-none/server.js → ...njection-service1-protocol-none/server.js
diff --git a/...h-service1-protocol-none/srv/service1.cds → ...n-service1-protocol-none/srv/service1.cds b/...h-service1-protocol-none/srv/service1.cds → ...n-service1-protocol-none/srv/service1.cds
diff --git a/...th-service1-protocol-none/srv/service1.js → ...on-service1-protocol-none/srv/service1.js b/...th-service1-protocol-none/srv/service1.js → ...on-service1-protocol-none/srv/service1.js
diff --git a/...h-service1-protocol-none/srv/service2.cds → ...n-service1-protocol-none/srv/service2.cds b/...h-service1-protocol-none/srv/service2.cds → ...n-service1-protocol-none/srv/service2.cds
diff --git a/...th-service1-protocol-none/srv/service2.js → ...on-service1-protocol-none/srv/service2.js b/...th-service1-protocol-none/srv/service2.js → ...on-service1-protocol-none/srv/service2.js
diff --git a/...ion-with-service2-protocol-none/README.md → ...njection-service2-protocol-none/README.md b/...ion-with-service2-protocol-none/README.md → ...njection-service2-protocol-none/README.md
diff --git a/...with-service2-protocol-none/db/schema.cds → ...tion-service2-protocol-none/db/schema.cds b/...with-service2-protocol-none/db/schema.cds → ...tion-service2-protocol-none/db/schema.cds
diff --git a/...tion-with-service2-protocol-none.expected → ...tion-with-service2-protocol-none.expected b/...tion-with-service2-protocol-none.expected → ...tion-with-service2-protocol-none.expected
diff --git a/...jection-with-service2-protocol-none.qlref → ...jection-with-service2-protocol-none.qlref b/...jection-with-service2-protocol-none.qlref → ...jection-with-service2-protocol-none.qlref
diff --git a/...injection-with-service2-protocol-none.svg → ...injection-with-service2-protocol-none.svg b/...injection-with-service2-protocol-none.svg → ...injection-with-service2-protocol-none.svg
diff --git a/...-with-service2-protocol-none/package.json → ...ction-service2-protocol-none/package.json b/...-with-service2-protocol-none/package.json → ...ction-service2-protocol-none/package.json
diff --git a/...ion-with-service2-protocol-none/server.js → ...njection-service2-protocol-none/server.js b/...ion-with-service2-protocol-none/server.js → ...njection-service2-protocol-none/server.js
diff --git a/...h-service2-protocol-none/srv/service1.cds → ...n-service2-protocol-none/srv/service1.cds b/...h-service2-protocol-none/srv/service1.cds → ...n-service2-protocol-none/srv/service1.cds
diff --git a/...th-service2-protocol-none/srv/service1.js → ...on-service2-protocol-none/srv/service1.js b/...th-service2-protocol-none/srv/service1.js → ...on-service2-protocol-none/srv/service1.js
diff --git a/...h-service2-protocol-none/srv/service2.cds → ...n-service2-protocol-none/srv/service2.cds b/...h-service2-protocol-none/srv/service2.cds → ...n-service2-protocol-none/srv/service2.cds
diff --git a/...th-service2-protocol-none/srv/service2.js → ...on-service2-protocol-none/srv/service2.js b/...th-service2-protocol-none/srv/service2.js → ...on-service2-protocol-none/srv/service2.js