-
Notifications
You must be signed in to change notification settings - Fork 1.9k
Open
Labels
questionFurther information is requestedFurther information is requested
Description
Description of the issue
I have a repo with multiple Java maven projects. The default codeql-analysis.yml file looks like this:
jobs:
...
steps:
...
- name: Autobuild
uses: github/codeql-action/autobuild@v1
...
Github's advanced security workflow reports that it cannot find a suitable source file to build when pom.xml files are not in the root of the repo: ERROR: Could not detect a suitable build command for the source checkout.
Is that expected?
Workaround
I can change it to use the find utility to search for pom.xml files and run the package goal:
jobs:
...
steps:
...
- if: matrix.language != 'java'
name: Autobuild
uses: github/codeql-action/autobuild@v1
- if: matrix.language == 'java'
name: Build Java
run: |
find . -name pom.xml -exec mvn -f {} package \;
...
My Ask
If that is expected, then I'm asking for an enhancement request to the autobuilder to search for pom.xml files.
Either way, I request Github doc be updated to show a solution like above for this, IMO, very common scenario.
Thanks!
Metadata
Metadata
Assignees
Labels
questionFurther information is requestedFurther information is requested