Merge pull request #119 from advanced-security/mbaluda-fixed-codeql

CodeQL version from `qlt.conf.json`

Author: jeongsoolee09

.github/workflows/code_scanning.yml

@@ -56,11 +56,18 @@ jobs:
         done
 
     # Initializes the CodeQL tools for scanning.
+    - name: Extract version from qlt.conf.json
+      uses: sergeysova/jq-action@v2
+      id: version
+      with:
+        cmd: 'jq .CodeQLCLIBundle qlt.conf.json -r'
+            
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3
       with:
         languages: javascript
         config-file: ./.github/codeql/codeql-config.yaml
+        tools: https://github.com/github/codeql-action/releases/download/${{steps.version.outputs.value}}/codeql-bundle-linux64.tar.gz
         debug: true
 
     - name: Perform CodeQL Analysis

.github/workflows/javascript.sarif.expected

@@ -3,7 +3,7 @@ library: true
 name: advanced-security/javascript-sap-cap-models
 version: 0.2.0
 extensionTargets:
-  codeql/javascript-all: "^0.8.7"
-  codeql/javascript-queries: "^0.8.7"
+  codeql/javascript-all: "^0.9.1"
+  codeql/javascript-queries: "^0.8.16"
 dataExtensions:
-  - "*.model.yml"
+  - "*.model.yml"

javascript/frameworks/cap/ext/qlpack.yml

@@ -2,21 +2,23 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/dataflow:
-    version: 0.1.7
+    version: 0.2.7
   codeql/javascript-all:
-    version: 0.8.7
+    version: 0.9.1
   codeql/mad:
-    version: 0.2.7
+    version: 0.2.16
   codeql/regex:
-    version: 0.2.7
+    version: 0.2.16
   codeql/ssa:
-    version: 0.2.7
+    version: 0.2.16
   codeql/tutorial:
-    version: 0.2.7
+    version: 0.2.16
   codeql/typetracking:
-    version: 0.2.7
+    version: 0.2.16
   codeql/util:
-    version: 0.2.7
+    version: 0.2.16
+  codeql/xml:
+    version: 0.0.3
   codeql/yaml:
-    version: 0.2.7
+    version: 0.2.16
 compiled: false

javascript/frameworks/cap/lib/codeql-pack.lock.yml

@@ -5,5 +5,5 @@ version: 0.2.0
 suites: codeql-suites
 extractor: javascript
 dependencies:
-  codeql/javascript-all: "^0.8.7"
+  codeql/javascript-all: "^0.9.1"
   advanced-security/javascript-sap-cap-models: "^0.2.0"

javascript/frameworks/cap/lib/qlpack.yml

@@ -2,21 +2,23 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/dataflow:
-    version: 0.1.7
+    version: 0.2.7
   codeql/javascript-all:
-    version: 0.8.7
+    version: 0.9.1
   codeql/mad:
-    version: 0.2.7
+    version: 0.2.16
   codeql/regex:
-    version: 0.2.7
+    version: 0.2.16
   codeql/ssa:
-    version: 0.2.7
+    version: 0.2.16
   codeql/tutorial:
-    version: 0.2.7
+    version: 0.2.16
   codeql/typetracking:
-    version: 0.2.7
+    version: 0.2.16
   codeql/util:
-    version: 0.2.7
+    version: 0.2.16
+  codeql/xml:
+    version: 0.0.3
   codeql/yaml:
-    version: 0.2.7
+    version: 0.2.16
 compiled: false

javascript/frameworks/cap/src/codeql-pack.lock.yml

@@ -5,7 +5,7 @@ version: 0.2.0
 suites: codeql-suites
 extractor: javascript
 dependencies:
-  codeql/javascript-all: "^0.8.7"
+  codeql/javascript-all: "^0.9.1"
   advanced-security/javascript-sap-cap-models: "^0.2.0"
   advanced-security/javascript-sap-cap-all: "^0.2.0"
-default-suite-file: codeql-suites/javascript-code-scanning.qls
+default-suite-file: codeql-suites/javascript-code-scanning.qls

javascript/frameworks/cap/src/qlpack.yml

@@ -2,27 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/dataflow:
-    version: 0.1.7
+    version: 0.2.7
   codeql/javascript-all:
-    version: 0.8.7
+    version: 0.9.1
   codeql/javascript-queries:
-    version: 0.8.7
+    version: 0.8.16
   codeql/mad:
-    version: 0.2.7
+    version: 0.2.16
   codeql/regex:
-    version: 0.2.7
+    version: 0.2.16
   codeql/ssa:
-    version: 0.2.7
+    version: 0.2.16
   codeql/suite-helpers:
-    version: 0.7.7
+    version: 0.7.16
   codeql/tutorial:
-    version: 0.2.7
+    version: 0.2.16
   codeql/typetracking:
-    version: 0.2.7
+    version: 0.2.16
   codeql/typos:
-    version: 0.2.7
+    version: 0.2.16
   codeql/util:
-    version: 0.2.7
+    version: 0.2.16
+  codeql/xml:
+    version: 0.0.3
   codeql/yaml:
-    version: 0.2.7
+    version: 0.2.16
 compiled: false

javascript/frameworks/cap/test/codeql-pack.lock.yml

@@ -1,10 +1,10 @@
 ---
 name: advanced-security/javascript-sap-cap-queries-tests
-version: 0.1.0
+version: 0.2.0
 extractor: javascript
 dependencies:
-  codeql/javascript-all: "^0.8.7"
-  codeql/javascript-queries: "^0.8.7"
-  advanced-security/javascript-sap-cap-queries: "^0.1.0"
-  advanced-security/javascript-sap-cap-models: "^0.1.0"
-  advanced-security/javascript-sap-cap-all: "^0.1.0"
+  codeql/javascript-all: "^0.9.1"
+  codeql/javascript-queries: "^0.8.16"
+  advanced-security/javascript-sap-cap-queries: "^0.2.0"
+  advanced-security/javascript-sap-cap-models: "^0.2.0"
+  advanced-security/javascript-sap-cap-all: "^0.2.0"

javascript/frameworks/cap/test/qlpack.yml

@@ -3,6 +3,6 @@ library: true
 name: advanced-security/javascript-sap-ui5-models
 version: 0.6.0
 extensionTargets:
-  codeql/javascript-all: "^0.8.7"
+  codeql/javascript-all: "^0.9.1"
 dataExtensions:
   - "*.model.yml"