Repository navigation
CodeQL 1.0.16 fails on Linux (1.0.15 ok) #760
Description
The CodeQL runs for the Jamulus project on Linux have started failing since CodeQL was updated to 1.0.16. Version 1.0.15 was fine.
For comparison, the workflow was run on the same commit as an earlier successful run.
The successful run is at https://github.com/softins/jamulus/actions/runs/1303486160
The failed run on the same commit is at https://github.com/softins/jamulus/actions/runs/1311314438
- Is it possible in the meantime to pin the version of CodeQL used to 1.0.15?
- Is there a bug in 1.0.16?
- Is there something different we need to do for 1.0.16 to run correctly?
Thank you
Metadata
Metadata
Assignees
Labels
No labels
Activity
hvitved commentedon Oct 6, 2021
The
No source code was seen and extractederror indicates that something could potentially have changed in the tracer. @github/codeql-c could you take a look, please?adityasharad commentedon Oct 6, 2021
Yes: in your workflow file, you can change
github/codeql-action/init@v1andgithub/codeql-action/analyze@v1togithub/codeql-action/init@v1.0.15andgithub/codeql-action/analyze@v1.0.15. This will pin the version to that specific tag, instead of tracking the latestv1.*release. Commit SHAs from thegithub/codeql-actionrepo are also supported in this syntax.edoardopirovano commentedon Oct 6, 2021
Versions 1.0.16 and 1.0.15 of
codeql-actionboth use the same release of the CodeQL toolchain (2.6.2) and, therefore, the same tracer. This must be due to a change in the Action itself - I strongly suspect #744.softins commentedon Oct 6, 2021
Just to confirm that by explicitly specifying 1.0.15, my run is successful again.
edoardopirovano commentedon Oct 6, 2021
Thanks for trying that out! I'll investigate what is going on with 1.0.16 soon but I'm glad you're unblocked in the meantime :)
edoardopirovano commentedon Oct 7, 2021
Thanks for raising this with us @softins! My understanding of what is going on is as follows - CodeQL needs some environment variables to be set during the build process so that it can observe the build. However, your build script uses
debuildwhich by default unsets all environment variables as documented here. Thus, in order to allow CodeQL to observe the build process the--preserve-envoption needs to be passed to that command. I've opened a PR doing this here: jamulussoftware/jamulus#2060, and can confirm that with that change everything works with 1.0.16.I'm unsure how this workflow worked with 1.0.15. We made some changes (#744) to how we set the environment variables that observe the build, but my understanding is that even with 1.0.15 we did need some variables to be set. My hypothesis is that the changes we made broke some mechanism we had of being resistant to variables being unset. This merits a deeper investigation, but in the meantime I would suggest that merging the above PR is the best way to resolve your issue.
softins commentedon Oct 7, 2021
@edoardopirovano thank you for the quick response and the PR!
edoardopirovano commentedon Oct 7, 2021
Closing this issue since your build appears to be working again after my PR: https://github.com/jamulussoftware/jamulus/actions/runs/1317351140
I will open an internal issue to investigate further quite what happened that made the workflow as previously written not work.