Initial CodeQL commit #702

noelle-iterable · 2025-09-24T14:59:36Z

🔹 JIRA Ticket(s) if any

PSEC-643

✏️ Description

Enables CodeQL workflow and GitHub Advanced Security on this repo

github-actions · 2025-09-24T15:00:08Z

Lines	Statements	Branches	Functions
	38.64% (182/471)	12.29% (22/179)	32.9% (51/155)

qltysh · 2025-09-24T15:00:20Z

Diff Coverage: Not applicable. There was no coverage data reported for the files in this diff.

Total Coverage: This PR will not change total coverage.

🛟 Help

Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.
Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.
File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)
- Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

_{This is from Qlty Cloud, the successor to Code Climate Quality. Learn more.}

…on file

.github/workflows/codeql.yml

…run to just swift.

…che still isn't caching

… v2.

… v3. removing the iterable swift sdk

…ild inline

…leAPI/IterableAPI.

…leAPI/IterableAPI with an increased timeout.

…leAPI/IterableAPI with an increased timeout and addressing a build failure.

…m 'build' to 'prepare'

.github/workflows/codeql.yml

lposen · 2025-10-07T01:35:26Z

.github/workflows/codeql.yml

+        run: |
+          yarn install
+          cd example/android
+          ./gradlew clean


./gradlew clean doesn't fully build a version of the app. Do you need the app to be built in order to run the tests? If so, you should probably run ./gradlew build

./gradlew build fails to build.

./gradle build causes the workflow to fail. It seems like ./gradlew clean is enough to generate the files needed in order to do the analysis.

.github/workflows/codeql.yml

…o clean

…steps modified

…nd comments are addressed

lposen

lgtm!

Initial CodeQL commit

4b57564

randall-wyatt and others added 6 commits September 24, 2025 11:04

changing swift build mode to manual

bfbe3b8

working on the artifact for ios

387fae6

working on the artifact for ios

07dd54a

Working on the artifact for iOS v2

c778ac3

Checking to see if the failure is due to a poorly configured turbo.js…

7824467

…on file

Fixed yml config error in hierarchy

683fa7a

github-advanced-security bot found potential problems Sep 26, 2025

View reviewed changes

.github/workflows/codeql.yml Fixed Show fixed Hide fixed

Setting timeout for build

fb7391f

github-advanced-security bot found potential problems Sep 26, 2025

View reviewed changes

.github/workflows/codeql.yml Fixed Show fixed Hide fixed

noelle-iterable added 2 commits September 25, 2025 18:48

Debugging cache settings

bf2ec60

Looks like it was cancelled before it could complete, extending timeout

f92a213

github-advanced-security bot found potential problems Sep 26, 2025

View reviewed changes

.github/workflows/codeql.yml Fixed Show fixed Hide fixed

noelle-iterable added 15 commits September 25, 2025 19:43

ignoring kotlin files that will not build in this environment

560b97f

Using the path-ignore doesn't work for compiled langauges. isolating …

c7a46b0

…run to just swift.

re-declaring permissions and strategy

f38d0a3

Changing how CocoaPod dependencies are called

c6d9f53

filtering out the autobuild java and kt results

a628773

Seems like there is a number of files that cannot be found and the ca…

c656ca9

…che still isn't caching

Testing instal of react native sdk inline with the ios example build

fbeaeee

Testing instal of react native sdk inline with the ios example build,…

e71e649

… v2.

Testing instal of react native sdk inline with the ios example build,…

1a2bbd7

… v3. removing the iterable swift sdk

Testing another variant of build for iOS

f3a251c

using the correct code path

65fbfe7

Code path not found, going back to default path

a7a0d11

Resolving peer dependency issue

3e1647f

Changing to manual build

7119966

Changing to manual build and updating build steps to include xcode bu…

619a886

…ild inline

noelle-iterable added 22 commits September 29, 2025 01:05

checking to see if the same works targeting the rniterableapi

b9f8e70

This builds and analyzes the Example app, which includes the RNIterab…

d211672

…leAPI/IterableAPI.

This builds and analyzes the Example app, which includes the RNIterab…

e2b91c8

…leAPI/IterableAPI with an increased timeout.

This builds and analyzes the Example app, which includes the RNIterab…

9c5d58a

…leAPI/IterableAPI with an increased timeout and addressing a build failure.

trying to turn flipper off without modify the Podfile

17108a7

Modifying codeql.yml to fix build issue

d29cff6

Modifying codeql.yml to fix build issue, wrong path

f4d1d25

Modifying codeql.yml to fix build issue, wrong path, typo.

32e3211

Modifying codeql.yml to fix build issue, pod install broke.

5d49da8

android example build steps

c98b68f

android example build with yarn

40a393a

android example build with yarn, stupid typo

2c9f6ec

android is choaking on a typescript, new ios instructions

499299d

android is choaking on a typescript, new ios instructions changed fro…

531b062

…m 'build' to 'prepare'

the steps didn't seem to work out, going back to loren's steps

20fe2a8

complained about bundle exec by itself

6a2c598

complained about a depenency, tryingto just do a pod install

a356b07

did not build the example app. made changes to the android script.

4c44703

android is working now, ios seems to stall out building

89a2900

out of date dependency, doesn't perform the full install for ios

506265e

out of date dependency, doesn't perform the full install for ios v2

eea36d6

I think this is a final.

1d9c1f5

lposen requested changes Oct 7, 2025

View reviewed changes

noelle-iterable added 4 commits October 6, 2025 19:14

Incorporating comments from lposen

961f164

Changing the build command for ios, changed the gradle command back t…

360a41b

…o clean

Build for Android succeeds on clean, doublechecking build. ios build …

56ecc9d

…steps modified

Cleaned up the build steps so that the codeql database is populated a…

48d24e9

…nd comments are addressed

lposen approved these changes Oct 8, 2025

View reviewed changes

noelle-iterable merged commit dfbc762 into master Oct 8, 2025
12 of 13 checks passed

noelle-iterable deleted the CodeQL_Workflow branch October 8, 2025 02:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Initial CodeQL commit #702

Initial CodeQL commit #702

Uh oh!

noelle-iterable commented Sep 24, 2025 •

edited by atlassian bot

Loading

Uh oh!

github-actions bot commented Sep 24, 2025 •

edited

Loading

Uh oh!

qltysh bot commented Sep 24, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

lposen Oct 7, 2025

Uh oh!

noelle-iterable Oct 7, 2025

Uh oh!

noelle-iterable Oct 7, 2025

Uh oh!

Uh oh!

Uh oh!

lposen left a comment

Uh oh!

Uh oh!

Uh oh!

Initial CodeQL commit #702

Initial CodeQL commit #702

Uh oh!

Conversation

noelle-iterable commented Sep 24, 2025 • edited by atlassian bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔹 JIRA Ticket(s) if any

✏️ Description

Uh oh!

github-actions bot commented Sep 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

qltysh bot commented Sep 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

lposen Oct 7, 2025

Choose a reason for hiding this comment

Uh oh!

noelle-iterable Oct 7, 2025

Choose a reason for hiding this comment

Uh oh!

noelle-iterable Oct 7, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

lposen left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

noelle-iterable commented Sep 24, 2025 •

edited by atlassian bot

Loading

github-actions bot commented Sep 24, 2025 •

edited

Loading

qltysh bot commented Sep 24, 2025 •

edited

Loading