59 lines
1.7 KiB
Bash
Executable File
59 lines
1.7 KiB
Bash
Executable File
#!/bin/bash -x -e
|
|
#* Minimal setup to run analysis using information provided by a request
|
|
|
|
#* Take output saved by the server
|
|
QUERYPACKID=$1
|
|
shift
|
|
QUERYLANGUAGE=$1
|
|
shift
|
|
|
|
# and
|
|
DBOWNER=$1
|
|
shift
|
|
DBREPO=$1
|
|
|
|
# FIXME Provide this via environment or explicit argument
|
|
GMSROOT=/Users/hohn/local/ghes-mirva-server
|
|
GMSROOT=/Users/hohn/work-gh/mrva/mrvacommander/cmd/server
|
|
|
|
#* Set up derived paths
|
|
DBPATH=$GMSROOT/var/codeql/dbs/$DBOWNER/$DBREPO
|
|
DBZIP=$GMSROOT/codeql/dbs/$DBOWNER/$DBREPO/${DBOWNER}_${DBREPO}_db.zip
|
|
DBEXTRACT=$GMSROOT/var/codeql/dbs/$DBOWNER/$DBREPO
|
|
|
|
QUERYPACK=$GMSROOT/var/codeql/querypacks/qp-$QUERYPACKID.tgz
|
|
QUERYEXTRACT=$GMSROOT/var/codeql/querypacks/qp-$QUERYPACKID
|
|
|
|
QUERYOUTD=$GMSROOT/var/codeql/sarif/localrun/$DBOWNER/$DBREPO
|
|
QUERYOUTF=$QUERYOUTD/${DBOWNER}_${DBREPO}.sarif
|
|
|
|
#* Prep work before running the command
|
|
|
|
#** Extract database
|
|
mkdir -p $DBEXTRACT && cd $DBEXTRACT
|
|
unzip -o -q $DBZIP
|
|
|
|
# Extract query pack
|
|
mkdir -p $QUERYEXTRACT && cd $QUERYEXTRACT
|
|
tar zxf $QUERYPACK
|
|
|
|
#** Prepare target directory
|
|
mkdir -p $QUERYOUTD
|
|
|
|
#* run database analyze
|
|
cd $GMSROOT
|
|
codeql database analyze --format=sarif-latest --rerun \
|
|
--output $QUERYOUTF \
|
|
-j8 \
|
|
-- $DBPATH $QUERYEXTRACT
|
|
|
|
#* report result
|
|
printf "run-analysis-output in %s\n" $QUERYOUTF
|
|
|
|
# TODO Is the bqrs really necessary? It can also be found by the go code at this point.
|
|
# TODO The name of the query is only found in the query pack itself and would have
|
|
# to be extracted from there.
|
|
|
|
# BQRSPATH=$GMSROOT/var/codeql/dbs/$DBOWNER/$DBREPO/$LANGUAGE/results/codeql-remote/query/
|
|
# printf "run-analysis-bqrs in %s\n" $QUERYOUTF
|