feature: initial commit for all new image changes

2024-11-13 17:16:01 -07:00
parent de6aa9e70e
commit fcf3d0ac96
1042 changed files with 45086 additions and 1 deletions
@@ -0,0 +1,32 @@
+#!/bin/bash -e -o pipefail
+################################################################################
+##  File:  install-codeql-bundle.sh
+##  Desc:  Install CodeQL bundle
+################################################################################
+
+source ~/utils/utils.sh
+
+# Retrieve the CLI version of the latest CodeQL bundle.
+defaults_json_path=$(download_with_retry https://raw.githubusercontent.com/github/codeql-action/v2/src/defaults.json)
+bundle_version=$(jq -r '.cliVersion' $defaults_json_path)
+bundle_tag_name="codeql-bundle-v$bundle_version"
+
+echo "Downloading CodeQL bundle $bundle_version..."
+# Note that this is the all-platforms CodeQL bundle, to support scenarios where customers run
+# different operating systems within containers.
+archive_path=$(download_with_retry "https://github.com/github/codeql-action/releases/download/$bundle_tag_name/codeql-bundle.tar.gz")
+
+codeql_toolcache_path=$AGENT_TOOLSDIRECTORY/CodeQL/$bundle_version/x64
+mkdir -p $codeql_toolcache_path
+
+echo "Unpacking the downloaded CodeQL bundle archive..."
+tar -xzf $archive_path -C $codeql_toolcache_path
+
+# Touch a file to indicate to the CodeQL Action that this bundle shipped with the toolcache. This is
+# to support overriding the CodeQL version specified in defaults.json on GitHub Enterprise.
+touch $codeql_toolcache_path/pinned-version
+
+# Touch a file to indicate to the toolcache that setting up CodeQL is complete.
+touch $codeql_toolcache_path.complete
+
+invoke_tests "Common" "CodeQL Bundle"