René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Git commit sha detection inconsistent between telemetry and actual operations","articleBody":"See:\n\nhttps://github.com/github/codeql-action/blob/cac5926de5e2c542638262c4e24527972023cdec/src/status-report.ts#L271-L272\n\nvs:\n\nhttps://github.com/github/codeql-action/blob/cac5926de5e2c542638262c4e24527972023cdec/src/git-utils.ts#L48-L69\n\nSo if the checkout is at a different sha from `GITHUB_SHA` then the two are different. In my case this made debugging very difficult because when I reran the workflow with debug logging enabled the telemetry calls were printed and showed me it reporting a different sha from the one that is actually used by the upload action.\n\nI suspect this happened because the the telemetry was added later and we originally implemented the \"sha of current checkout\" behaviour so that it worked outside actions. Removing the \"sha of current checkout\" behaviour, or making it the lowest priority, feels like the \"most correct\" fix, but more risky than just changing the telemetry to use the `getCommitOid` function.","author":{"url":"https://github.com/rneatherway","@type":"Person","name":"rneatherway"},"datePublished":"2025-12-19T10:07:46.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/3376/codeql-action/issues/3376"}