Skip to content

Commit ddea5ee

Browse files
IRusclaude
andauthored
Scan all JVM Kotlin modules in CodeQL (#18)
The manual-build compile step only covered 8 of the 12 JVM-compiling modules, so CodeQL never extracted :samples-cli (CLI entrypoint), :test-support-wat (WAT lexer/binary writer parsing untrusted text), :annotations, or :benchmarks. Add their compile tasks so the security-extended queries see that code. :footprint-baseline and :footprint-core declare only an iosArm64 target and have no JVM compilation, so they stay out. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
1 parent 2124f7e commit ddea5ee

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,10 @@ jobs:
5757
:bindgen-ksp:classes
5858
:gradle-plugin:classes
5959
:tck:compileKotlinJvm
60+
:annotations:compileKotlinJvm
61+
:samples-cli:compileKotlin
62+
:test-support-wat:compileKotlinJvm
63+
:benchmarks:compileKotlinJvm
6064
6165
- name: Perform CodeQL analysis
6266
uses: github/codeql-action/analyze@v4

0 commit comments

Comments
 (0)