mirror of
https://github.com/actions/runner-images.git
synced 2025-12-20 06:35:47 +00:00
f346a37e5c
* [Ubuntu] Update default CodeQL major version to v3 * [Ubuntu] use the latest CodeQL Action major version Instead of hardcoding it! * Add missing `v` to CodeQL bundle URL
47 lines
2.1 KiB
Bash
47 lines
2.1 KiB
Bash
#!/bin/bash -e
|
|
################################################################################
|
|
## File: install-codeql-bundle.sh
|
|
## Desc: Install CodeQL CLI Bundle to the toolcache.
|
|
################################################################################
|
|
|
|
# Source the helpers for use with the script
|
|
source $HELPER_SCRIPTS/install.sh
|
|
|
|
# Retrieve the latest major version of the CodeQL Action to use in the base URL for downloading the bundle.
|
|
releases=$(curl -s "https://api.github.com/repos/github/codeql-action/releases")
|
|
|
|
# Get the release tags starting with v[0-9] and sort them in descending order, then parse the first one to get the major version.
|
|
codeql_action_latest_major_version=$(echo "$releases" |
|
|
jq -r '.[].tag_name' |
|
|
grep -E '^v[0-9]' |
|
|
sort -nr |
|
|
head -n 1 |
|
|
sed -E 's/^v([0-9]+).*/\1/')
|
|
if [ -z "$codeql_action_latest_major_version" ]; then
|
|
echo "Error: Unable to find the latest major version of the CodeQL Action."
|
|
exit 1
|
|
fi
|
|
|
|
# Retrieve the CLI version of the latest CodeQL bundle.
|
|
base_url="$(curl -fsSL https://raw.githubusercontent.com/github/codeql-action/v"$codeql_action_latest_major_version"/src/defaults.json)"
|
|
bundle_version="$(echo "$base_url" | jq -r '.cliVersion')"
|
|
bundle_tag_name="codeql-bundle-v$bundle_version"
|
|
|
|
echo "Downloading CodeQL bundle $bundle_version..."
|
|
# Note that this is the all-platforms CodeQL bundle, to support scenarios where customers run
|
|
# different operating systems within containers.
|
|
codeql_archive=$(download_with_retry "https://github.com/github/codeql-action/releases/download/$bundle_tag_name/codeql-bundle.tar.gz")
|
|
|
|
codeql_toolcache_path="$AGENT_TOOLSDIRECTORY/CodeQL/$bundle_version/x64"
|
|
mkdir -p "$codeql_toolcache_path"
|
|
|
|
echo "Unpacking the downloaded CodeQL bundle archive..."
|
|
tar -xzf "$codeql_archive" -C "$codeql_toolcache_path"
|
|
|
|
# Touch a file to indicate to the CodeQL Action that this bundle shipped with the toolcache. This is
|
|
# to support overriding the CodeQL version specified in defaults.json on GitHub Enterprise.
|
|
touch "$codeql_toolcache_path/pinned-version"
|
|
|
|
# Touch a file to indicate to the toolcache that setting up CodeQL is complete.
|
|
touch "$codeql_toolcache_path.complete"
|