René's URL Explorer Experiment


Title: Add repository property for `tools` input by mbg · Pull Request #4037 · github/codeql-action · GitHub

Open Graph Title: Add repository property for `tools` input by mbg · Pull Request #4037 · github/codeql-action

X Title: Add repository property for `tools` input by mbg · Pull Request #4037 · github/codeql-action

Description: This PR attempts to simplify and tidy up #3766 while resolving conflicts with recent changes to the codebase. Compared with #3766, there are the following changes: The repository property's behaviour is gated by a new FF. There is no github-codeql-tools-mode property. The justification for this is that in Advanced Setup workflows, the tools input provided in the workflow takes precedence. The value of the repository property can be enforced with a prefix !. This is similar to the + notation for the queries input, where + means "combine rather than replace". This PR does not change the telemetry to include the source of the effective tools value. However, it does lay the groundwork for it with the EffectiveInput type and getToolsInput returns a suitable value. Once we have merged relevant backend changes, the intention is to then make use of EffectiveInput values in the status reports. This will avoid duplication of work across similar inputs (i.e. rather than adding several new status reports properties for each, we will have an array of EffectiveInput values). That's outside the scope of this PR though. Like #3766, this PR also updates setup-codeql to load the repository properties. Since the loaded values are not persisted, this means that both setup-codeql and init could load them. However, we don't yet allow setup-codeql in the same workflow as init, so this is not an issue right now. If we allow setup-codeql before init in the future, we will need to review potentially duplicated work across both steps in any case. Risk assessment For internal use only. Please select the risk level of this change: Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only. Which use cases does this change impact? Workflow types: Advanced setup - Impacts users who have custom CodeQL workflows. Managed - Impacts users with dynamic workflows (Default Setup, Code Quality, ...). Products: Code Scanning - The changes impact analyses when analysis-kinds: code-scanning. Code Quality - The changes impact analyses when analysis-kinds: code-quality. Other first-party - The changes impact other first-party analyses. Environments: Dotcom - Impacts CodeQL workflows on github.com and/or GitHub Enterprise Cloud with Data Residency. GHES - Impacts CodeQL workflows on GitHub Enterprise Server. How did/will you validate this change? Unit tests - I am depending on unit test coverage (i.e. tests in .test.ts files). End-to-end tests - I am depending on PR checks (i.e. tests in pr-checks). If something goes wrong after this change is released, what are the mitigation and rollback strategies? Feature flags - All new or changed code paths can be fully disabled with corresponding feature flags. How will you know if something goes wrong after this change is released? Telemetry - I rely on existing telemetry or have made changes to the telemetry. Dashboards - I will watch relevant dashboards for issues after the release. Consider whether this requires this change to be released at a particular time rather than as part of a regular release. Alerts - New or existing monitors will trip if something goes wrong with this change. Are there any special considerations for merging or releasing this change? No special considerations - This change can be merged at any time. Merge / deployment checklist Confirm this change is backwards compatible with existing workflows. Consider adding a changelog entry for this change. Confirm the readme and docs have been updated if necessary.

Open Graph Description: This PR attempts to simplify and tidy up #3766 while resolving conflicts with recent changes to the codebase. Compared with #3766, there are the following changes: The repository property's be...

X Description: This PR attempts to simplify and tidy up #3766 while resolving conflicts with recent changes to the codebase. Compared with #3766, there are the following changes: The repository property'...

Opengraph URL: https://github.com/github/codeql-action/pull/4037

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/commits/:range(.:format)
route-controllerpull_requests
route-actioncommits
fetch-noncev2:3a1b90f1-34a5-c02a-e1af-ef9659ddea2c
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idE826:2D562:40017B:5695A6:6AEDB4B3
html-safe-nonce8ceed90ed3e72fa55d36b5b85ef2fb5a773368da7bfce3590fdcaa7fc5a1d544
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFODI2OjJENTYyOjQwMDE3Qjo1Njk1QTY6NkFFREI0QjMiLCJ2aXNpdG9yX2lkIjoiODY2NDkyMDg0NDQyNjY1NDg5OSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac08c7eeebef4961a242cb0887f1c20fab65dd02b8c9a59a9d7f074aaa191714bb
hovercard-subject-tagpull_request:4108639294
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/commits
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
twitter:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
og:image:altThis PR attempts to simplify and tidy up #3766 while resolving conflicts with recent changes to the codebase. Compared with #3766, there are the following changes: The repository property's be...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Nonee40242599af5e7da0f281843dec7492c322688d4a48caeea85f9fb8e41c8ea53
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql-action git https://github.com/github/codeql-action.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id259445878
octolytics-dimension-repository_nwogithub/codeql-action
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id259445878
octolytics-dimension-repository_network_root_nwogithub/codeql-action
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release89cbf2bb52a24fc179bf5925abba0ba574b262ce
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4037%2Fcommits%2F009715ddbfe6fa887b1ac76fe840f953d7bf8db8
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4037%2Fcommits%2F009715ddbfe6fa887b1ac76fe840f953d7bf8db8
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Fcommits&source=header-repo&source_repo=github%2Fcodeql-action
Reloadhttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
Reloadhttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
Reloadhttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
githubhttps://github.com/github
codeql-actionhttps://github.com/github/codeql-action
Codehttps://github.com/github/codeql-action
Issues165 (165)https://github.com/github/codeql-action/issues
Pull requests41 (41)https://github.com/github/codeql-action/pulls
Actionshttps://github.com/github/codeql-action/actions
Security and quality2 (2)https://github.com/github/codeql-action/security
Insightshttps://github.com/github/codeql-action/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
mbghttps://github.com/mbg
mainhttps://github.com/github/codeql-action/tree/main
mbg/repo-props/toolshttps://github.com/github/codeql-action/tree/mbg/repo-props/tools
Conversation 12 https://github.com/github/codeql-action/pull/4037
Commits 12 https://github.com/github/codeql-action/pull/4037/commits
Checks 226 https://github.com/github/codeql-action/pull/4037/checks
Files changed https://github.com/github/codeql-action/pull/4037/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
Add repository property for tools input https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#top
Show all changes 12 commits https://github.com/github/codeql-action/pull/4037/files
009715d Add `github-codeql-tools` property mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
1f57eb0 Add FF for `tools` repository property mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/1f57eb0ff5042ed1e738ac840f6adfe9f20bd269
f58d696 Move `loadRepositoryProperties` to `properties.ts` mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/f58d69685da7d9984428bdabe7f997f5ebe782fe
3479f3f Load repository properties in `setup-codeql` action mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/3479f3fca19dc5dc7df5dba2e016f6a8de6a2748
49f2e37 Add and use `getToolsInput` mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/49f2e373108b82d79ac36307bc528470f6b6ca60
32ed58d Check log messages in tests mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/32ed58dc59670b008aef189b9337abd58ea2f870
be24c11 Rename to `ComputedInput` mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/be24c11a39168a91880fdb86e4db14793d0969d2
f9442c4 Include computed `tools` value in `computed_inputs` mbg Jul 22, 2026 https://github.com/github/codeql-action/pull/4037/commits/f9442c40ccb97381cac788e90ff807e85a473827
372f165 Merge remote-tracking branch 'origin/main' into mbg/repo-props/tools mbg Jul 23, 2026 https://github.com/github/codeql-action/pull/4037/commits/372f1654023fe02dcd1bd954c0aeb0dff47c3403
b060f9d Merge remote-tracking branch 'origin/main' into mbg/repo-props/tools mbg Jul 24, 2026 https://github.com/github/codeql-action/pull/4037/commits/b060f9d53cac321ca392710c5df3a7a0b4f2f21c
f170b3a Remove `name` field from `ComputedInput` mbg Jul 24, 2026 https://github.com/github/codeql-action/pull/4037/commits/f170b3a3213fcc24e3372b0c4b58450398eebbfa
1564bfa Add changelog entry mbg Jul 24, 2026 https://github.com/github/codeql-action/pull/4037/commits/1564bfa3257034750e3a3ca326e2a630f1aa0d63
Clear filters https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
Please reload this pagehttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
Please reload this pagehttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
entry-points.js https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-73697317a7dd14441dcfb24bc586f637ae2b815b5e503a05a81816be74fcd815
properties.test.ts https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-b0c82c57405f66bc38a832c5a2dfe10586f9e034516b456b34092df678c48baf
properties.ts https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
Next https://github.com/github/codeql-action/pull/4037/commits/1f57eb0ff5042ed1e738ac840f6adfe9f20bd269
Please reload this pagehttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
https://github.com/mbg
mbghttps://github.com/github/codeql-action/commits?author=mbg
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/entry-points.jshttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-73697317a7dd14441dcfb24bc586f637ae2b815b5e503a05a81816be74fcd815
View file https://github.com/github/codeql-action/blob/009715ddbfe6fa887b1ac76fe840f953d7bf8db8/lib/entry-points.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
src/feature-flags/properties.test.tshttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-b0c82c57405f66bc38a832c5a2dfe10586f9e034516b456b34092df678c48baf
View file https://github.com/github/codeql-action/blob/009715ddbfe6fa887b1ac76fe840f953d7bf8db8/src/feature-flags/properties.test.ts
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql-action/pull/4037/commits/{{ revealButtonHref }}
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-b0c82c57405f66bc38a832c5a2dfe10586f9e034516b456b34092df678c48baf
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-b0c82c57405f66bc38a832c5a2dfe10586f9e034516b456b34092df678c48baf
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-b0c82c57405f66bc38a832c5a2dfe10586f9e034516b456b34092df678c48baf
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
src/feature-flags/properties.tshttps://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
View file https://github.com/github/codeql-action/blob/009715ddbfe6fa887b1ac76fe840f953d7bf8db8/src/feature-flags/properties.ts
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql-action/pull/4037/commits/{{ revealButtonHref }}
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
https://github.com/github/codeql-action/pull/4037/commits/009715ddbfe6fa887b1ac76fe840f953d7bf8db8#diff-d31485648dc2fa1d5c34f158d6e805228e1bb63477510792372423cd52466be0
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.