description: Runs a test of query filters using the check SARIF action

name: Check queries that ran

name: Query filters tests

on:

push:

branches:

- main

- releases/v1

- releases/v2

pull_request:

types:

- opened

- synchronize

- reopened

- ready_for_review

workflow_dispatch: {}

jobs:

query-filters:

name: Query Filters Tests

timeout-minutes: 45

runs-on: ubuntu-latest

steps:

- name: Check out repository

uses: actions/checkout@v3

- name: Prepare test

id: prepare-test

uses: ./.github/prepare-test

with:

version: latest

- name: Check SARIF for default queries with Single include, Single exclude

uses: ./../action/.github/query-filter-test

with:

sarif-file: ${{ runner.temp }}/results/javascript.sarif

queries-run: js/zipslip

queries-not-run: js/path-injection

config-file: ./.github/codeql/codeql-config-query-filters1.yml

tools: ${{ steps.prepare-test.outputs.tools-url }}

- name: Check SARIF for query packs with Single include, Single exclude

uses: ./../action/.github/query-filter-test

with:

sarif-file: ${{ runner.temp }}/results/javascript.sarif

queries-run: js/zipslip,javascript/example/empty-or-one-block

queries-not-run: js/path-injection

config-file: ./.github/codeql/codeql-config-query-filters2.yml

tools: ${{ steps.prepare-test.outputs.tools-url }}

- name: Check SARIF for query packs and local queries with Single include, Single exclude

uses: ./../action/.github/query-filter-test

with:

sarif-file: ${{ runner.temp }}/results/javascript.sarif

queries-run: js/zipslip,javascript/example/empty-or-one-block,inrepo-javascript-querypack/show-ifs

queries-not-run: js/path-injection,complex-python-querypack/show-ifs,complex-python-querypack/foo/bar/show-ifs

config-file: ./.github/codeql/codeql-config-query-filters3.yml

tools: ${{ steps.prepare-test.outputs.tools-url }}

- Add the ability to filter queries from a code scanning run by using the `query-filters` option in the code scanning configuration file. [#1098](https://github.com/github/codeql-action/pull/1098)