Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
34 commits
Select commit Hold shift + click to select a range
507795f
Update changelog and version after v1.1.3
invalid-email-address Feb 23, 2022
949eeb2
1.1.4
invalid-email-address Feb 23, 2022
9169d24
Update checked-in dependencies
invalid-email-address Feb 23, 2022
360221e
Merge pull request #947 from github/mergeback/v1.1.3-to-main-75f07e7a
aeisenberg Feb 23, 2022
42af723
Revert "Merge pull request #869 from github/edoardo/windows-11-error"
edoardopirovano Feb 24, 2022
438f654
Merge pull request #948 from github/edoardo/revert-windows-11
edoardopirovano Feb 24, 2022
4e02f8e
Bump removeNPMAbsolutePaths from 2.0.0 to 3.0.0
dependabot[bot] Feb 24, 2022
0da8152
Update checked-in dependencies
invalid-email-address Feb 24, 2022
117a67b
Merge pull request #949 from github/dependabot/npm_and_yarn/removeNPM…
henrymercer Feb 24, 2022
162ecaf
Update default CodeQL bundle version to 2.8.2
hmakholm Feb 25, 2022
8ec6a84
Expand PR checks to cover `windows-2022`
edoardopirovano Feb 28, 2022
2531390
Merge pull request #950 from github/hmakholm/pr/2.8.2
hmakholm Feb 28, 2022
86940df
Delete the results directory in between runs.
chrisgavin Feb 28, 2022
d63f798
Retry directory deletion to avoid Windows file locking issues.
chrisgavin Feb 28, 2022
938e0a0
Add `retryDelay` and a type cast to make it work.
chrisgavin Feb 28, 2022
b1c781d
Merge pull request #955 from github/delete-results-directory
chrisgavin Feb 28, 2022
fa19286
Merge pull request #954 from github/edoardo/expand-tests
edoardopirovano Mar 1, 2022
07990f0
Revert "Revert "Use `--codescanning-config` flag of CLI""
edoardopirovano Mar 1, 2022
527d515
Bump version flag for using `--codescanning-config` flag
edoardopirovano Mar 1, 2022
e4766c8
Merge pull request #957 from github/edoardo/reuse-codescanning-config
edoardopirovano Mar 2, 2022
47dd636
Fix link to docs
daniel-beck Mar 2, 2022
3615d8a
Add runner OS and arch to status report
cklin Mar 2, 2022
870dbaa
Use getRequiredEnvParam()
cklin Mar 2, 2022
75e4d9f
Bump @actions/artifact from 0.5.2 to 1.0.0
dependabot[bot] Mar 3, 2022
4154eaf
Update checked-in dependencies
invalid-email-address Mar 3, 2022
5e27f57
Merge pull request #961 from github/dependabot/npm_and_yarn/actions/a…
aeisenberg Mar 3, 2022
401a76f
Add runner OS release to status report
cklin Mar 3, 2022
939659c
Merge pull request #959 from cklin/report-runner-os-arch
cklin Mar 3, 2022
308528b
Merge pull request #958 from daniel-beck/fix-link
aeisenberg Mar 4, 2022
44198be
1.1.4
invalid-email-address Mar 7, 2022
a33ae09
Update CHANGELOG.md
hmakholm Mar 7, 2022
e75fa83
Update CHANGELOG.md
hmakholm Mar 7, 2022
701b6a5
Update CHANGELOG.md
hmakholm Mar 7, 2022
1f44993
Update CHANGELOG.md
hmakholm Mar 7, 2022
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Fix link to docs
  • Loading branch information
daniel-beck committed Mar 2, 2022
commit 47dd636fbc9bfd7432a203f6910a58eb9d620c50
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -146,4 +146,4 @@ The very first time code scanning is run and if it is on a pull request, you wil

After code scanning has analyzed the code in a pull request, it needs to compare the analysis of the topic branch (the merge commit of the branch you used to create the pull request) with the analysis of the base branch (the branch into which you want to merge the pull request). This allows code scanning to compute which alerts are newly introduced by the pull request, which alerts were already present in the base branch, and whether any existing alerts are fixed by the changes in the pull request. Initially, if you use a pull request to add code scanning to a repository, the base branch has not yet been analyzed, so it's not possible to compute these details. In this case, when you click through from the results check on the pull request you will see the "Missing analysis for base commit SHA-HASH" message.

For more information and other causes of this message, see [Reasons for the "missing analysis" message](https://docs.github.com/en/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/setting-up-code-scanning-for-a-repository#reasons-for-the-missing-analysis-message)
For more information and other causes of this message, see [Reasons for the "Analysis not found" message](https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/setting-up-code-scanning-for-a-repository#reasons-for-the-analysis-not-found-message)