René's URL Explorer Experiment


Title: C#: Set proxy environment variables, if Dependabot proxy is detected by mbg · Pull Request #18029 · github/codeql · GitHub

Open Graph Title: C#: Set proxy environment variables, if Dependabot proxy is detected by mbg · Pull Request #18029 · github/codeql

X Title: C#: Set proxy environment variables, if Dependabot proxy is detected by mbg · Pull Request #18029 · github/codeql

Description: This PR is part of work to enable private package registries to be used in Default Setup. The existing Default Setup workflow will initialise the Dependabot package proxy, if a private package registry configuration is set. The host, port, and certificate used by the proxy are then passed to CodeQL in the analyze step. The changes in this PR modify the C# extractor to recognise when the corresponding environment variables are set. If so, we use the data from those environment variables to: Construct the proxy address from the host and port and pass it to dotnet via the HTTP_PROXY and HTTPS_PROXY environment variables. Store the certificate on disk, and pass the path to dotnet via SSL_CERT_FILE. We also configure a suitable proxy for the feed reachability checks. In testing so far, this works fine on Linux with fairly arbitrary versions of dotnet. It does not seem to work on macOS and likely also does not work on Windows.

Open Graph Description: This PR is part of work to enable private package registries to be used in Default Setup. The existing Default Setup workflow will initialise the Dependabot package proxy, if a private package regi...

X Description: This PR is part of work to enable private package registries to be used in Default Setup. The existing Default Setup workflow will initialise the Dependabot package proxy, if a private package regi...

Opengraph URL: https://github.com/github/codeql/pull/18029

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:36d2254d-0c94-17b1-f4b2-644db86f070f
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idCE06:381ACD:2C8239B:3D4656B:6A50633F
html-safe-nonce6fe076ef12e64b863eb1e3ad06a1cb605db8616abe2d38d064d47dc7ea7ff76d
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDRTA2OjM4MUFDRDoyQzgyMzlCOjNENDY1NkI6NkE1MDYzM0YiLCJ2aXNpdG9yX2lkIjoiNTEyNDA0NDczNzgwODk4Mjg0NyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac7e93cc6db2310f7ac01b610db8fe5437e87d46d5686b0cf33f6f7a34af7255f1
hovercard-subject-tagpull_request:2187591435
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/18029/files
twitter:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
og:image:altThis PR is part of work to enable private package registries to be used in Default Setup. The existing Default Setup workflow will initialise the Dependabot package proxy, if a private package regi...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Noned6dc8294eb500fa36bbc57472d61fe87c522f9c3c1d64f70f4926f66a66a7efb
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release7ac0ad2f2c7e4b9056617355fd9e33e22b0c8df9
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/18029/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18029%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18029%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/18029/files
Reloadhttps://github.com/github/codeql/pull/18029/files
Reloadhttps://github.com/github/codeql/pull/18029/files
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 431 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
mbghttps://github.com/mbg
mainhttps://github.com/github/codeql/tree/main
mbg/csharp/set-proxy-cert-filehttps://github.com/github/codeql/tree/mbg/csharp/set-proxy-cert-file
Conversation 24 https://github.com/github/codeql/pull/18029
Findings https://github.com/github/codeql/pull/18029/findings
Commits 15 https://github.com/github/codeql/pull/18029/commits
Checks 0 https://github.com/github/codeql/pull/18029/checks
Files changed https://github.com/github/codeql/pull/18029/files
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
C#: Set proxy environment variables, if Dependabot proxy is detected https://github.com/github/codeql/pull/18029/files#top
Show all changes 15 commits https://github.com/github/codeql/pull/18029/files
5376012 C#: Add `CODEQL_PROXY_*` environment variable names mbg Nov 11, 2024 https://github.com/github/codeql/pull/18029/commits/537601290b235c80021d986e4245cbb18fbebc3a
232caa7 C#: Add `DependabotProxy` class mbg Nov 11, 2024 https://github.com/github/codeql/pull/18029/commits/232caa7185880c150566dd42224162be58feef33
8ca7560 C#: Initialise `DependabotProxy` in `DotNetCliInvoker` mbg Nov 19, 2024 https://github.com/github/codeql/pull/18029/commits/8ca75602d8a5c25abdd770e0958981cfcb6ed218
6cd5711 C#: Set environment variables for proxy for calls to `dotnet` mbg Nov 19, 2024 https://github.com/github/codeql/pull/18029/commits/6cd5711313c9e47f39845b24051e6ecaee5df519
de415d6 C#: Add more logging to `DependabotProxy` mbg Nov 29, 2024 https://github.com/github/codeql/pull/18029/commits/de415d68cfa0428c2b133c5311014aced6a8807a
87bd21e C#: Use `Add` for environment variables mbg Dec 2, 2024 https://github.com/github/codeql/pull/18029/commits/87bd21e12c311cf57965c33eb058add1aebf16ec
e999ec1 C# Expose `CertificatePath` from `DependabotProxy` mbg Dec 2, 2024 https://github.com/github/codeql/pull/18029/commits/e999ec1ecf8736a5815522df5ffd97f8c6a1061b
984091d C#: Propagate `DependabotProxy` instance down from `DependencyManager` mbg Dec 2, 2024 https://github.com/github/codeql/pull/18029/commits/984091d4a4cf8fa4e44fed4f22a9cc9f1fa1191d
ca251fb C#: Set up proxy for `IsFeedReachable`, if configured mbg Dec 2, 2024 https://github.com/github/codeql/pull/18029/commits/ca251fb840ffdfcda228baa1dd90b7e678c02ee0
ee7f0b0 C#: Load Dependabot Proxy certificate in `DependabotProxy`, and imple… mbg Dec 3, 2024 https://github.com/github/codeql/pull/18029/commits/ee7f0b0f2afb157a3ae2f52410ecd66e19cd414f
2e80e09 C#: Apply suggestions from code review for `DependabotProxy` mbg Dec 5, 2024 https://github.com/github/codeql/pull/18029/commits/2e80e09f52e2e8c1d4b54507dfca05e4bfd9d94e
7369d04 C#: Don't initialise `DependabotProxy` on Windows or macOS mbg Dec 5, 2024 https://github.com/github/codeql/pull/18029/commits/7369d043ed1e9438e69cf9c4c7b4bdcd988e6465
952488c C#: Fix possible null dereference mbg Dec 5, 2024 https://github.com/github/codeql/pull/18029/commits/952488c2d843d2a0196311f638051b4026b8a32c
653d68e C#: Explicitly close writer in `DependabotProxy` mbg Dec 6, 2024 https://github.com/github/codeql/pull/18029/commits/653d68ea9472b93be390545b27381c98ed7756da
c8ccfe4 C#: Create certificate from string, rather than file mbg Dec 6, 2024 https://github.com/github/codeql/pull/18029/commits/c8ccfe40a550026411ecde0a8bc78b7486a4407e
Clear filters https://github.com/github/codeql/pull/18029/files
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
DependabotProxy.cs https://github.com/github/codeql/pull/18029/files#diff-0191ea2391d406de552cdaf86c74bb9d43d53d7eaca8a35d6d7417345791f460
DependencyManager.cs https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
DotNet.cs https://github.com/github/codeql/pull/18029/files#diff-af06d845c5e37d70cc0588799a6d18ce680d9f3a2c2d5d01f91cd4c78f130603
DotNetCliInvoker.cs https://github.com/github/codeql/pull/18029/files#diff-f08fc7a2741e99a3b2931038c4780972c6d0b1cfaa786861bcd7cb955916b4b7
EnvironmentVariableNames.cs https://github.com/github/codeql/pull/18029/files#diff-39756d8acc50684113440c0d275e59d2079dbcc508752f1062017e791ba38857
NugetPackageRestorer.cs https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
https://github.com/github/codeql/blob/main/CODEOWNERS#L7
csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DependabotProxy.cshttps://github.com/github/codeql/pull/18029/files#diff-0191ea2391d406de552cdaf86c74bb9d43d53d7eaca8a35d6d7417345791f460
View file https://github.com/github/codeql/blob/c8ccfe40a550026411ecde0a8bc78b7486a4407e/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DependabotProxy.cs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18029/{{ revealButtonHref }}
tamasvajkhttps://github.com/tamasvajk
Dec 6, 2024https://github.com/github/codeql/pull/18029/files#r1873382181
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L7
csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DependencyManager.cshttps://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
View file https://github.com/github/codeql/blob/c8ccfe40a550026411ecde0a8bc78b7486a4407e/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DependencyManager.cs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18029/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/pull/18029/files#diff-0179d8d74e2e78735e1d6cde08b1cff43d2a132f2c53a86c277cfdf3bbd95017
https://github.com/github/codeql/blob/main/CODEOWNERS#L7
csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DotNet.cshttps://github.com/github/codeql/pull/18029/files#diff-af06d845c5e37d70cc0588799a6d18ce680d9f3a2c2d5d01f91cd4c78f130603
View file https://github.com/github/codeql/blob/c8ccfe40a550026411ecde0a8bc78b7486a4407e/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DotNet.cs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18029/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18029/files#diff-af06d845c5e37d70cc0588799a6d18ce680d9f3a2c2d5d01f91cd4c78f130603
https://github.com/github/codeql/pull/18029/files#diff-af06d845c5e37d70cc0588799a6d18ce680d9f3a2c2d5d01f91cd4c78f130603
https://github.com/github/codeql/blob/main/CODEOWNERS#L7
csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DotNetCliInvoker.cshttps://github.com/github/codeql/pull/18029/files#diff-f08fc7a2741e99a3b2931038c4780972c6d0b1cfaa786861bcd7cb955916b4b7
View file https://github.com/github/codeql/blob/c8ccfe40a550026411ecde0a8bc78b7486a4407e/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DotNetCliInvoker.cs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18029/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18029/files#diff-f08fc7a2741e99a3b2931038c4780972c6d0b1cfaa786861bcd7cb955916b4b7
https://github.com/github/codeql/pull/18029/files#diff-f08fc7a2741e99a3b2931038c4780972c6d0b1cfaa786861bcd7cb955916b4b7
https://github.com/github/codeql/pull/18029/files#diff-f08fc7a2741e99a3b2931038c4780972c6d0b1cfaa786861bcd7cb955916b4b7
https://github.com/github/codeql/blob/main/CODEOWNERS#L7
csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/EnvironmentVariableNames.cshttps://github.com/github/codeql/pull/18029/files#diff-39756d8acc50684113440c0d275e59d2079dbcc508752f1062017e791ba38857
View file https://github.com/github/codeql/blob/c8ccfe40a550026411ecde0a8bc78b7486a4407e/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/EnvironmentVariableNames.cs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18029/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18029/files#diff-39756d8acc50684113440c0d275e59d2079dbcc508752f1062017e791ba38857
https://github.com/github/codeql/blob/main/CODEOWNERS#L7
csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cshttps://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
View file https://github.com/github/codeql/blob/c8ccfe40a550026411ecde0a8bc78b7486a4407e/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18029/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
tamasvajkhttps://github.com/tamasvajk
Dec 2, 2024https://github.com/github/codeql/pull/18029/files#r1866515310
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
mbghttps://github.com/mbg
Dec 3, 2024https://github.com/github/codeql/pull/18029/files#r1867668716
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/18029/files
https://github.com/github/codeql/pull/18029/files#diff-95be6dea2cd28a066bd4060d79b54a212b24f4275f8414c03273ab9b35038b0a
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.