hohn/sarif-cli
1
0
Fork 0
mirror of https://github.com/hohn/sarif-cli.git synced 2025-12-16 09:13:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

Refine build-multiple-codeql-versions.sh; add v2.13.5 test

Browse Source
This commit is contained in:
Michael Hohn
2023-07-26 13:30:41 -07:00
committed by =Michael Hohn
parent 5a8b4a33a3
commit c746161d35
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
build-multiple-codeql-versions.sh
View File

@@ -34,6 +34,7 @@ v2.9.4
CLI_VERSION=v2.9.4 CLI_VERSION=v2.9.4
CLI_VERSION=v2.12.7 CLI_VERSION=v2.12.7
CLI_VERSION=v2.13.5
gh codeql set-version $CLI_VERSION gh codeql set-version $CLI_VERSION
#* Build vanilla DB #* Build vanilla DB
@@ -53,7 +54,7 @@ function codeql-complib() {
# Create the qlpack file using commands: # Create the qlpack file using commands:
cd ~/local/sarif-cli cd ~/local/sarif-cli
#: Bug: drops the codeql- prefix # Bug: drops the codeql- prefix
rm -fR dataflow-sql-injection rm -fR dataflow-sql-injection
codeql pack init codeql-dataflow-sql-injection codeql pack init codeql-dataflow-sql-injection
cp -f dataflow-sql-injection/qlpack.yml codeql-dataflow-sql-injection/ cp -f dataflow-sql-injection/qlpack.yml codeql-dataflow-sql-injection/
@@ -81,6 +82,7 @@ codeql database analyze \
# Verify cli version in SARIF output # Verify cli version in SARIF output
SAVER=`jq -r '.runs |.[] |.tool.driver.semanticVersion ' sqlidb-$CLI_VERSION.sarif` SAVER=`jq -r '.runs |.[] |.tool.driver.semanticVersion ' sqlidb-$CLI_VERSION.sarif`
echo $SAVER
if [ v$SAVER != $CLI_VERSION ] ; if [ v$SAVER != $CLI_VERSION ] ;
then then
echo "---: codeql version inconsistency" echo "---: codeql version inconsistency"
@@ -101,7 +103,7 @@ EOF
#* Check CSV messages for success #* Check CSV messages for success
cd ~/local/sarif-cli/codeql-dataflow-sql-injection cd ~/local/sarif-cli/codeql-dataflow-sql-injection
# head -4 sqlidb-$CLI_VERSION-1.sarif.csv head -4 sqlidb-$CLI_VERSION-1.sarif.csv
grep -qi success sqlidb-$CLI_VERSION-1.sarif.csv || { grep -qi success sqlidb-$CLI_VERSION-1.sarif.csv || {
echo "---: sarif-cli failure: sqlidb-$CLI_VERSION-1.sarif*" echo "---: sarif-cli failure: sqlidb-$CLI_VERSION-1.sarif*"
} }
@@ -109,3 +111,11 @@ grep -qi success sqlidb-$CLI_VERSION-1.sarif.csv || {
#* CSV output #* CSV output
# ls -la sqlidb-$CLI_VERSION-1* # ls -la sqlidb-$CLI_VERSION-1*
# find sqlidb-$CLI_VERSION-1*.scantables -print # find sqlidb-$CLI_VERSION-1*.scantables -print
#* Summary
cd ~/local/sarif-cli/codeql-dataflow-sql-injection
#** SARIF files
ls sqlidb-v*.sarif
#** CSV conversion info
ls sqlidb-v2.*.sarif.csv*
tail -2 sqlidb-v2.*.sarif.csv*