github
diff --git a/‎lib/setup-codeql.js
Lines changed: 7 additions & 0 deletions b/‎lib/setup-codeql.js
Lines changed: 7 additions & 0 deletions
diff --git a/‎lib/setup-codeql.js.map
Lines changed: 1 addition & 1 deletion b/‎lib/setup-codeql.js.map
Lines changed: 1 addition & 1 deletion
diff --git a/‎lib/setup-codeql.test.js
Lines changed: 2 additions & 0 deletions b/‎lib/setup-codeql.test.js
Lines changed: 2 additions & 0 deletions
diff --git a/‎lib/setup-codeql.test.js.map
Lines changed: 1 addition & 1 deletion b/‎lib/setup-codeql.test.js.map
Lines changed: 1 addition & 1 deletion
diff --git a/‎src/setup-codeql.test.ts
Lines changed: 2 additions & 0 deletions b/‎src/setup-codeql.test.ts
Lines changed: 2 additions & 0 deletions
diff --git a/‎src/setup-codeql.ts
Lines changed: 11 additions & 0 deletions b/‎src/setup-codeql.ts
Lines changed: 11 additions & 0 deletions
@@ -157,6 +157,7 @@ test("setupCodeQLBundle logs the CodeQL CLI version being used when asked to use
       compressionMethod: "gzip",
       downloadDurationMs: 200,
       extractionDurationMs: 300,
+      toolsUrl: "toolsUrl",
     },
     toolsVersion: LINKED_CLI_VERSION.cliVersion,
   });
@@ -204,6 +205,7 @@ test("setupCodeQLBundle logs the CodeQL CLI version being used when asked to dow
       compressionMethod: "gzip",
       downloadDurationMs: 200,
       extractionDurationMs: 300,
+      toolsUrl: bundleUrl,
     },
     toolsVersion: expectedVersion,
   });
 
@@ -466,6 +466,7 @@ export interface ToolsDownloadStatusReport {
   compressionMethod: tar.CompressionMethod;
   downloadDurationMs: number;
   extractionDurationMs: number;
+  toolsUrl: string;
 }
 
 // Exported using `export const` for testing purposes. Specifically, we want to
@@ -553,6 +554,7 @@ export const downloadCodeQL = async function (
         compressionMethod,
         downloadDurationMs,
         extractionDurationMs,
+        toolsUrl: sanitizeUrlForStatusReport(codeqlURL),
       },
       toolsVersion: maybeCliVersion ?? "unknown",
     };
@@ -585,6 +587,7 @@ export const downloadCodeQL = async function (
       compressionMethod,
       downloadDurationMs,
       extractionDurationMs,
+      toolsUrl: sanitizeUrlForStatusReport(codeqlURL),
     },
     toolsVersion: maybeCliVersion ?? toolcacheVersion,
   };
@@ -711,3 +714,11 @@ async function cleanUpGlob(glob: string, name: string, logger: Logger) {
     logger.warning(`Failed to clean up ${name}: ${e}.`);
   }
 }
+
+function sanitizeUrlForStatusReport(url: string): string {
+  return ["github/codeql-action", "dsp-testing/codeql-cli-nightlies"].some(
+    (repo) => url.startsWith(`https://github.com/${repo}/releases/download/`),
+  )
+    ? url
+    : "sanitized-value";
+}