custom-codeql-cli-aspx.yml

name: "CodeQL custom CLI"

on:
  push:
    branches: [ "main" ]
  pull_request:
    # The branches below must be a subset of the branches above
    branches: [ "main" ]
  schedule:
    - cron: '20 2 * * 3'

jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write

    strategy:
      fail-fast: false
      # matrix:
        # language: [ 'javascript' ]
        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support

    steps:
    - name: Checkout repository
      uses: actions/checkout@v3

    - name: CodeQL tracing
      run: |
        export PATH=$PATH:$(find $RUNNER_TOOL_CACHE -type d -name "codeql" -exec test -e '{}'/codeql \; -print)
        codeql database init --overwrite -l javascript -s . aspx-js-db
        codeql database trace-command --index-traceless-dbs -- aspx-js-db
        codeql database trace-command --no-tracing -- aspx-js-db $(codeql version --format=json | jq -r .unpackedLocation)/tools/linux64/java/bin/java -cp "$(codeql resolve extractor --language=javascript)/tools/extractor-javascript.jar" com.semmle.js.extractor.Main --file-type HTML --exclude '**/*.js' --exclude '**/*.html' --exclude '**/*.ts' --include '**/*.aspx' .
        codeql database finalize aspx-js-db
        codeql database analyze --format=sarifv2.1.0 -o aspx.sarif ./aspx-js-db
    
    # - name: upload
      # uses: github/codeql-action/upload-sarif@v2
      # with: 
        # sarif_file: ./aspx.sarif
        # category: aspx-js-scan