"Code scanning cannot determine the alerts introduced or fixed by this pull request"

See original GitHub issue

Recently I see failures always from codeql, “Code scanning cannot determine the alerts introduced or fixed by this pull request”

Although I have only the go language configured:

    strategy:
      fail-fast: true
      matrix:
        language: [ 'go' ]

(See https://github.com/drud/ddev/blob/a5edc5dde1a630658d7acfded2bfd11b53811f25/.github/workflows/codeql.yml#L32-L37)

it still complains that it can’t find a python run. Cursor_and_Allow_overriding_config_in_`config___yaml`_using_`override_config__true`__fixes__4100__fixes__4079__fixes__4099_by_rfay_·_Pull_Request__4118_·_drud_ddev

Is this because it’s a forked PR perhaps? Anyway, it’s pretty unuseful behavior.

Result is in https://github.com/drud/ddev/pull/4118/checks?check_run_id=7822079521

Issue Analytics

  • State:open
  • Created a year ago
  • Comments:9 (5 by maintainers)

github_iconTop GitHub Comments

1reaction
aeisenbergcommented, Aug 15, 2022

Hmmm…I didn’t do anything. Your Code Scanning results pages are still showing a missing python analysis. I am not sure why it is not showing up when you list all the analyses. Let me ask internally.

0reactions
rfaycommented, Aug 16, 2022

Thanks. I think there’s a bug here too… the OP describes misbehavior, not just something I can fix by deleting one analysis, and there’s nothing that was done wrong in the use of this action.

So:

  • Please fix it so it only compares to the current or recent analyses on the target branch.
  • Please fix it so it only compares to analyses that are currently enabled on the target branch.
Read more comments on GitHub >

github_iconTop Results From Across the Web

Setting up code scanning for a repository
When the code scanning jobs complete, GitHub works out whether any alerts were added by the pull request and adds the "Code scanning...
Read more >
GitHub code scanning: How to use it to find and fix ...
Alerts, workflows, actions​​ To enable code scanning, you basically need to: Select which checks you want to run. Set up workflows that will...
Read more >
Users can view and comment on code scanning alerts ...
Users can view and comment on code scanning alerts on the Conversation tab in a pull request ... Code scanning flags up potential...
Read more >
GitHub: Block Pull Request if Code Scanning Alerts Are ...
If you don't see the CodeQL to add as a status check to the branch protection, it won't appear as an option until...
Read more >
Secure Your Code With GitHub Code Scanning - YouTube
ABSTRACT & BIO ▭▭▭▭▭▭What is GitHub Code Scanning ? How can we use it to find vulnerabilities in GitHub's hosted code for free?...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found