mirror of
https://github.com/github/codeql.git
synced 2025-12-15 16:23:11 +01:00
287 lines
12 KiB
Python
287 lines
12 KiB
Python
module(
|
|
name = "ql",
|
|
version = "0.0",
|
|
repo_name = "codeql",
|
|
)
|
|
|
|
# this points to our internal repository when `codeql` is checked out as a submodule thereof
|
|
# when building things from `codeql` independently this is stubbed out in `.bazelrc`
|
|
bazel_dep(name = "semmle_code", version = "0.0")
|
|
local_path_override(
|
|
module_name = "semmle_code",
|
|
path = "..",
|
|
)
|
|
|
|
# see https://registry.bazel.build/ for a list of available packages
|
|
|
|
bazel_dep(name = "platforms", version = "1.0.0")
|
|
bazel_dep(name = "rules_go", version = "0.56.1")
|
|
bazel_dep(name = "rules_pkg", version = "1.0.1")
|
|
bazel_dep(name = "rules_nodejs", version = "6.2.0-codeql.1")
|
|
bazel_dep(name = "rules_python", version = "0.40.0")
|
|
bazel_dep(name = "rules_shell", version = "0.5.0")
|
|
bazel_dep(name = "bazel_skylib", version = "1.8.1")
|
|
bazel_dep(name = "abseil-cpp", version = "20240116.1", repo_name = "absl")
|
|
bazel_dep(name = "nlohmann_json", version = "3.11.3", repo_name = "json")
|
|
bazel_dep(name = "fmt", version = "12.1.0-codeql.1")
|
|
bazel_dep(name = "rules_kotlin", version = "2.1.3-codeql.1")
|
|
bazel_dep(name = "gazelle", version = "0.40.0")
|
|
bazel_dep(name = "rules_dotnet", version = "0.21.5-codeql.1")
|
|
bazel_dep(name = "googletest", version = "1.14.0.bcr.1")
|
|
bazel_dep(name = "rules_rust", version = "0.66.0")
|
|
bazel_dep(name = "zstd", version = "1.5.5.bcr.1")
|
|
|
|
bazel_dep(name = "buildifier_prebuilt", version = "6.4.0", dev_dependency = True)
|
|
|
|
# Keep edition and version approximately in sync with internal repo.
|
|
# the versions there are canonical, the versions here are used for CI in github/codeql, as well as for the vendoring of dependencies.
|
|
RUST_EDITION = "2024"
|
|
|
|
# run buildutils-internal/scripts/fill-rust-sha256s.py when updating (internal repo)
|
|
# a nightly toolchain is required to enable experimental_use_cc_common_link, which we require internally
|
|
# we prefer to run the same version as internally, even if experimental_use_cc_common_link is not really
|
|
# required in this repo
|
|
RUST_VERSION = "nightly/2025-08-01"
|
|
|
|
rust = use_extension("@rules_rust//rust:extensions.bzl", "rust")
|
|
rust.toolchain(
|
|
edition = RUST_EDITION,
|
|
# We need those extra target triples so that we can build universal binaries on macos
|
|
extra_target_triples = [
|
|
"x86_64-apple-darwin",
|
|
"aarch64-apple-darwin",
|
|
],
|
|
# generated by buildutils-internal/scripts/fill-rust-sha256s.py (internal repo)
|
|
sha256s = {
|
|
"2025-08-01/rustc-nightly-x86_64-unknown-linux-gnu.tar.xz": "9bbeaf5d3fc7247d31463a9083aa251c995cc50662c8219e7a2254d76a72a9a4",
|
|
"2025-08-01/rustc-nightly-x86_64-apple-darwin.tar.xz": "c9ea539a8eff0d5d162701f99f9e1aabe14dd0dfb420d62362817a5d09219de7",
|
|
"2025-08-01/rustc-nightly-aarch64-apple-darwin.tar.xz": "ae83feebbc39cfd982e4ecc8297731fe79c185173aee138467b334c5404b3773",
|
|
"2025-08-01/rustc-nightly-x86_64-pc-windows-msvc.tar.xz": "9f170c30d802a349be60cf52ec46260802093cb1013ad667fc0d528b7b10152f",
|
|
"2025-08-01/clippy-nightly-x86_64-unknown-linux-gnu.tar.xz": "9ae5f3cd8f557c4f6df522597c69d14398cf604cfaed2b83e767c4b77a7eaaf6",
|
|
"2025-08-01/clippy-nightly-x86_64-apple-darwin.tar.xz": "983cb9ee0b6b968188e04ab2d33743d54764b2681ce565e1b3f2b9135c696a3e",
|
|
"2025-08-01/clippy-nightly-aarch64-apple-darwin.tar.xz": "ed2219dbc49d088225e1b7c5c4390fa295066e071fddaa2714018f6bb39ddbf0",
|
|
"2025-08-01/clippy-nightly-x86_64-pc-windows-msvc.tar.xz": "911f40ab5cbdd686f40e00965271fe47c4805513a308ed01f30eafb25b448a50",
|
|
"2025-08-01/cargo-nightly-x86_64-unknown-linux-gnu.tar.xz": "106463c284e48e4904c717471eeec2be5cc83a9d2cae8d6e948b52438cad2e69",
|
|
"2025-08-01/cargo-nightly-x86_64-apple-darwin.tar.xz": "6ad35c40efc41a8c531ea43235058347b6902d98a9693bf0aed7fc16d5590cef",
|
|
"2025-08-01/cargo-nightly-aarch64-apple-darwin.tar.xz": "dd28c365e9d298abc3154c797720ad36a0058f131265c9978b4c8e4e37012c8a",
|
|
"2025-08-01/cargo-nightly-x86_64-pc-windows-msvc.tar.xz": "7b431286e12d6b3834b038f078389a00cac73f351e8c3152b2504a3c06420b3b",
|
|
"2025-08-01/llvm-tools-nightly-x86_64-unknown-linux-gnu.tar.xz": "e342e305d7927cc288d386983b2bc253cfad3776b113386e903d0b302648ef47",
|
|
"2025-08-01/llvm-tools-nightly-x86_64-apple-darwin.tar.xz": "e44dd3506524d85c37b3a54bcc91d01378fd2c590b2db5c5974d12f05c1b84d1",
|
|
"2025-08-01/llvm-tools-nightly-aarch64-apple-darwin.tar.xz": "0c1b5f46dd81be4a9227b10283a0fcaa39c14fea7e81aea6fd6d9887ff6cdc41",
|
|
"2025-08-01/llvm-tools-nightly-x86_64-pc-windows-msvc.tar.xz": "423e5fd11406adccbc31b8456ceb7375ce055cdf45e90d2c3babeb2d7f58383f",
|
|
"2025-08-01/rust-std-nightly-x86_64-unknown-linux-gnu.tar.xz": "3c0ceb46a252647a1d4c7116d9ccae684fa5e42aaf3296419febd2c962c3b41d",
|
|
"2025-08-01/rust-std-nightly-x86_64-apple-darwin.tar.xz": "3be416003cab10f767390a753d1d16ae4d26c7421c03c98992cf1943e5b0efe8",
|
|
"2025-08-01/rust-std-nightly-aarch64-apple-darwin.tar.xz": "4046ac0ef951cb056b5028a399124f60999fa37792eab69d008d8d7965f389b4",
|
|
"2025-08-01/rust-std-nightly-x86_64-pc-windows-msvc.tar.xz": "191ed9d8603c3a4fe5a7bbbc2feb72049078dae2df3d3b7d5dedf3abbf823e6e",
|
|
},
|
|
versions = [RUST_VERSION],
|
|
)
|
|
use_repo(rust, "rust_toolchains")
|
|
|
|
register_toolchains("@rust_toolchains//:all")
|
|
|
|
# deps for python extractor
|
|
# keep in sync by running `misc/bazel/3rdparty/update_cargo_deps.sh`
|
|
py_deps = use_extension("//misc/bazel/3rdparty:py_deps_extension.bzl", "p")
|
|
use_repo(
|
|
py_deps,
|
|
"vendor_py__anyhow-1.0.95",
|
|
"vendor_py__cc-1.2.14",
|
|
"vendor_py__clap-4.5.30",
|
|
"vendor_py__regex-1.11.1",
|
|
"vendor_py__tree-sitter-0.24.7",
|
|
"vendor_py__tree-sitter-graph-0.12.0",
|
|
)
|
|
|
|
# deps for ruby+rust
|
|
# keep in sync by running `misc/bazel/3rdparty/update_cargo_deps.sh`
|
|
tree_sitter_extractors_deps = use_extension("//misc/bazel/3rdparty:tree_sitter_extractors_extension.bzl", "r")
|
|
use_repo(
|
|
tree_sitter_extractors_deps,
|
|
"vendor_ts__anyhow-1.0.100",
|
|
"vendor_ts__argfile-0.2.1",
|
|
"vendor_ts__chalk-ir-0.104.0",
|
|
"vendor_ts__chrono-0.4.42",
|
|
"vendor_ts__clap-4.5.48",
|
|
"vendor_ts__dunce-1.0.5",
|
|
"vendor_ts__either-1.15.0",
|
|
"vendor_ts__encoding-0.2.33",
|
|
"vendor_ts__figment-0.10.19",
|
|
"vendor_ts__flate2-1.1.2",
|
|
"vendor_ts__glob-0.3.3",
|
|
"vendor_ts__globset-0.4.16",
|
|
"vendor_ts__itertools-0.14.0",
|
|
"vendor_ts__lazy_static-1.5.0",
|
|
"vendor_ts__mustache-0.9.0",
|
|
"vendor_ts__num-traits-0.2.19",
|
|
"vendor_ts__num_cpus-1.17.0",
|
|
"vendor_ts__proc-macro2-1.0.101",
|
|
"vendor_ts__quote-1.0.41",
|
|
"vendor_ts__ra_ap_base_db-0.0.301",
|
|
"vendor_ts__ra_ap_cfg-0.0.301",
|
|
"vendor_ts__ra_ap_hir-0.0.301",
|
|
"vendor_ts__ra_ap_hir_def-0.0.301",
|
|
"vendor_ts__ra_ap_hir_expand-0.0.301",
|
|
"vendor_ts__ra_ap_hir_ty-0.0.301",
|
|
"vendor_ts__ra_ap_ide_db-0.0.301",
|
|
"vendor_ts__ra_ap_intern-0.0.301",
|
|
"vendor_ts__ra_ap_load-cargo-0.0.301",
|
|
"vendor_ts__ra_ap_parser-0.0.301",
|
|
"vendor_ts__ra_ap_paths-0.0.301",
|
|
"vendor_ts__ra_ap_project_model-0.0.301",
|
|
"vendor_ts__ra_ap_span-0.0.301",
|
|
"vendor_ts__ra_ap_stdx-0.0.301",
|
|
"vendor_ts__ra_ap_syntax-0.0.301",
|
|
"vendor_ts__ra_ap_vfs-0.0.301",
|
|
"vendor_ts__rand-0.9.2",
|
|
"vendor_ts__rayon-1.11.0",
|
|
"vendor_ts__regex-1.11.3",
|
|
"vendor_ts__serde-1.0.228",
|
|
"vendor_ts__serde_json-1.0.145",
|
|
"vendor_ts__serde_with-3.14.1",
|
|
"vendor_ts__syn-2.0.106",
|
|
"vendor_ts__toml-0.9.7",
|
|
"vendor_ts__tracing-0.1.41",
|
|
"vendor_ts__tracing-flame-0.2.0",
|
|
"vendor_ts__tracing-subscriber-0.3.20",
|
|
"vendor_ts__tree-sitter-0.25.9",
|
|
"vendor_ts__tree-sitter-embedded-template-0.25.0",
|
|
"vendor_ts__tree-sitter-json-0.24.8",
|
|
"vendor_ts__tree-sitter-ql-0.23.1",
|
|
"vendor_ts__tree-sitter-ruby-0.23.1",
|
|
"vendor_ts__triomphe-0.1.14",
|
|
"vendor_ts__ungrammar-1.16.1",
|
|
"vendor_ts__zstd-0.13.3",
|
|
)
|
|
|
|
http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
|
|
|
|
# rust-analyzer sources needed by the rust ast-generator (see `rust/ast-generator/README.md`)
|
|
RUST_ANALYZER_SRC_TAG = "2025-01-07"
|
|
|
|
http_archive(
|
|
name = "rust-analyzer-src",
|
|
build_file = "//rust/ast-generator:BUILD.rust-analyzer-src.bazel",
|
|
integrity = "sha256-eo8mIaUafZL8LOM65bDIIIXw1rNQ/P/x5RK/XUtgo5g=",
|
|
patch_args = ["-p1"],
|
|
patches = [
|
|
"//rust/ast-generator:patches/rust-analyzer.patch",
|
|
],
|
|
strip_prefix = "rust-analyzer-%s" % RUST_ANALYZER_SRC_TAG,
|
|
url = "https://github.com/rust-lang/rust-analyzer/archive/refs/tags/%s.tar.gz" % RUST_ANALYZER_SRC_TAG,
|
|
)
|
|
|
|
dotnet = use_extension("@rules_dotnet//dotnet:extensions.bzl", "dotnet")
|
|
dotnet.toolchain(dotnet_version = "10.0.100")
|
|
use_repo(dotnet, "dotnet_toolchains")
|
|
|
|
register_toolchains("@dotnet_toolchains//:all")
|
|
|
|
csharp_main_extension = use_extension("//csharp:paket.main_extension.bzl", "main_extension")
|
|
use_repo(csharp_main_extension, "paket.main")
|
|
|
|
pip = use_extension("@rules_python//python/extensions:pip.bzl", "pip")
|
|
pip.parse(
|
|
hub_name = "codegen_deps",
|
|
python_version = "3.12",
|
|
requirements_lock = "//misc/codegen:requirements_lock.txt",
|
|
)
|
|
use_repo(pip, "codegen_deps")
|
|
|
|
swift_deps = use_extension("//swift/third_party:load.bzl", "swift_deps")
|
|
|
|
# following list can be kept in sync with `bazel mod tidy`
|
|
use_repo(
|
|
swift_deps,
|
|
"binlog",
|
|
"picosha2",
|
|
"swift-prebuilt-linux",
|
|
"swift-prebuilt-linux-download-only",
|
|
"swift-prebuilt-macos",
|
|
"swift-prebuilt-macos-download-only",
|
|
"swift-resource-dir-linux",
|
|
"swift-resource-dir-macos",
|
|
)
|
|
|
|
node = use_extension("@rules_nodejs//nodejs:extensions.bzl", "node")
|
|
node.toolchain(
|
|
name = "nodejs",
|
|
node_urls = [
|
|
"https://nodejs.org/dist/v{version}/{filename}",
|
|
"https://mirrors.dotsrc.org/nodejs/release/v{version}/{filename}",
|
|
],
|
|
node_version = "18.15.0",
|
|
)
|
|
use_repo(node, "nodejs", "nodejs_toolchains")
|
|
|
|
kotlin_extractor_deps = use_extension("//java/kotlin-extractor:deps.bzl", "kotlin_extractor_deps")
|
|
|
|
# following list can be kept in sync by running `bazel mod tidy` in `codeql`
|
|
use_repo(
|
|
kotlin_extractor_deps,
|
|
"codeql_kotlin_defaults",
|
|
"codeql_kotlin_embeddable",
|
|
"kotlin-compiler-1.6.0",
|
|
"kotlin-compiler-1.6.20",
|
|
"kotlin-compiler-1.7.0",
|
|
"kotlin-compiler-1.7.20",
|
|
"kotlin-compiler-1.8.0",
|
|
"kotlin-compiler-1.9.0-Beta",
|
|
"kotlin-compiler-1.9.20-Beta",
|
|
"kotlin-compiler-2.0.0-RC1",
|
|
"kotlin-compiler-2.0.20-Beta2",
|
|
"kotlin-compiler-2.1.0-Beta1",
|
|
"kotlin-compiler-2.1.20-Beta1",
|
|
"kotlin-compiler-2.2.0-Beta1",
|
|
"kotlin-compiler-2.2.20-Beta2",
|
|
"kotlin-compiler-embeddable-1.6.0",
|
|
"kotlin-compiler-embeddable-1.6.20",
|
|
"kotlin-compiler-embeddable-1.7.0",
|
|
"kotlin-compiler-embeddable-1.7.20",
|
|
"kotlin-compiler-embeddable-1.8.0",
|
|
"kotlin-compiler-embeddable-1.9.0-Beta",
|
|
"kotlin-compiler-embeddable-1.9.20-Beta",
|
|
"kotlin-compiler-embeddable-2.0.0-RC1",
|
|
"kotlin-compiler-embeddable-2.0.20-Beta2",
|
|
"kotlin-compiler-embeddable-2.1.0-Beta1",
|
|
"kotlin-compiler-embeddable-2.1.20-Beta1",
|
|
"kotlin-compiler-embeddable-2.2.0-Beta1",
|
|
"kotlin-compiler-embeddable-2.2.20-Beta2",
|
|
"kotlin-stdlib-1.6.0",
|
|
"kotlin-stdlib-1.6.20",
|
|
"kotlin-stdlib-1.7.0",
|
|
"kotlin-stdlib-1.7.20",
|
|
"kotlin-stdlib-1.8.0",
|
|
"kotlin-stdlib-1.9.0-Beta",
|
|
"kotlin-stdlib-1.9.20-Beta",
|
|
"kotlin-stdlib-2.0.0-RC1",
|
|
"kotlin-stdlib-2.0.20-Beta2",
|
|
"kotlin-stdlib-2.1.0-Beta1",
|
|
"kotlin-stdlib-2.1.20-Beta1",
|
|
"kotlin-stdlib-2.2.0-Beta1",
|
|
"kotlin-stdlib-2.2.20-Beta2",
|
|
)
|
|
|
|
go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
|
|
go_sdk.download(version = "1.25.0")
|
|
|
|
go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
|
|
go_deps.from_file(go_mod = "//go/extractor:go.mod")
|
|
use_repo(go_deps, "org_golang_x_mod", "org_golang_x_tools")
|
|
|
|
ripunzip_archive = use_repo_rule("//misc/ripunzip:ripunzip.bzl", "ripunzip_archive")
|
|
|
|
# go to https://github.com/GoogleChrome/ripunzip/releases to find latest version and corresponding sha256s
|
|
ripunzip_archive(
|
|
name = "ripunzip",
|
|
sha256_linux = "71482d7a7e4ea9176d5596161c49250c34b136b157c45f632b1111323fbfc0de",
|
|
sha256_macos_arm = "604194ab13f0aba3972995d995f11002b8fc285c8170401fcd46655065df20c9",
|
|
sha256_macos_intel = "65367b94fd579d93d46f2d2595cc4c9a60cfcf497e3c824f9d1a7b80fa8bd38a",
|
|
sha256_windows = "ac3874075def2b9e5074a3b5945005ab082cc6e689e1de658da8965bc23e643e",
|
|
version = "2.0.4",
|
|
)
|
|
|
|
register_toolchains(
|
|
"@nodejs_toolchains//:all",
|
|
)
|