Skip to content

Autobuild does not find maven build (pom.xml) files in subdirs  #5331

@mark-sawers

Description

@mark-sawers

Description of the issue
I have a repo with multiple Java maven projects. The default codeql-analysis.yml file looks like this:

  jobs:
   ...
   steps:
   ...
    - name: Autobuild
      uses: github/codeql-action/autobuild@v1
   ...

Github's advanced security workflow reports that it cannot find a suitable source file to build when pom.xml files are not in the root of the repo: ERROR: Could not detect a suitable build command for the source checkout.

Is that expected?

Workaround
I can change it to use the find utility to search for pom.xml files and run the package goal:

  jobs:
   ...
   steps:
   ...
    - if: matrix.language != 'java'
      name: Autobuild
      uses: github/codeql-action/autobuild@v1

    - if: matrix.language == 'java'
      name: Build Java
      run: |
        find . -name pom.xml -exec mvn -f {} package \;
   ...

My Ask
If that is expected, then I'm asking for an enhancement request to the autobuilder to search for pom.xml files.

Either way, I request Github doc be updated to show a solution like above for this, IMO, very common scenario.

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions