codeql-sap-js/.github/workflows/copilot-setup-steps.yml at 1f4103a31dec46f656c3a63ae4bb025e0867febf · advanced-security/codeql-sap-js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
name: "Copilot Setup Steps"

on:
  # Allow manual testing through the repository's "Actions" tab
  workflow_dispatch: {}
  # Automatically run the setup steps when an associated file is changed.
  push:
    branches:
      - main
    paths:
      - .github/workflows/copilot-setup-steps.yml
      - qlt.conf.json
      - extractors/cds/tools/package.json
      - extractors/cds/tools/package-lock.json
      - javascript/frameworks/*/qlpack.yml
  pull_request:
    branches:
      - main
    paths:
      - .github/workflows/copilot-setup-steps.yml
      - qlt.conf.json
      - extractors/cds/tools/package.json
      - extractors/cds/tools/package-lock.json
      - javascript/frameworks/*/qlpack.yml

jobs:
  # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
  copilot-setup-steps:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v5

      - name: Copilit Setup Steps - Install codeql and qlt
        id: setup-codeql-environment
        uses: advanced-security/codeql-development-template/.github/actions/setup-codeql-environment@main
        with:
          install-codeql: true
          install-language-runtimes: false
          install-ql-packs: false

      - name: Copilot Setup Steps - Install QL packs
        shell: bash
        run: |
          echo "Installing QL pack dependencies"
          codeql pack install --no-strict-mode javascript/frameworks/cap/ext
          codeql pack install --no-strict-mode javascript/frameworks/cap/lib
          codeql pack install --no-strict-mode javascript/frameworks/cap/src
          codeql pack install --no-strict-mode javascript/frameworks/cap/test
          codeql pack install --no-strict-mode javascript/frameworks/ui5/ext
          codeql pack install --no-strict-mode javascript/frameworks/ui5/lib
          codeql pack install --no-strict-mode javascript/frameworks/ui5/src
          codeql pack install --no-strict-mode javascript/frameworks/ui5/test
          codeql pack install --no-strict-mode javascript/frameworks/xsjs/ext
          codeql pack install --no-strict-mode javascript/frameworks/xsjs/lib
          codeql pack install --no-strict-mode javascript/frameworks/xsjs/src
          codeql pack install --no-strict-mode javascript/frameworks/xsjs/test
          codeql pack install --no-strict-mode javascript/heuristic-models/ext
          codeql pack install --no-strict-mode javascript/heuristic-models/tests

      - name: Copilot Setup Steps - Setup NodeJS for CDS extractor
        uses: actions/setup-node@v6
        with:
          cache: npm
          cache-dependency-path: extractors/cds/tools/package-lock.json
          node-version-file: extractors/cds/tools/package.json

      - name: Copilot Setup Steps - Install CDS Extractor Dependencies
        shell: bash
        working-directory: extractors/cds/tools
        run: |
          echo "Installing CDS extractor npm dependencies"
          npm ci

      - name: Copilot Setup Steps - Build CDS extractor
        shell: bash
        working-directory: extractors/cds/tools
        run: |
          echo "Building CDS extractor"
          npm run build

      - name: Copilot Setup Steps - Verify setup complete
        shell: bash
        run: |
          echo "✅ Setup complete and verified:"
          echo "  - QLT installed: $(qlt version)"
          echo "  - QLT in PATH: $(which qlt)"
          echo "  - CodeQL installed: $(codeql --version | head -1)"
          echo "  - CodeQL in PATH: $(which codeql)"
          echo "  - Node.js: $(node --version)"
          echo "  - npm: $(npm --version)"
          echo "  - CDS extractor built successfully"