@theholocron/cli 2.0.0-alpha.23 → 2.0.0-alpha.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -100,6 +100,12 @@ interface Source extends ProviderIdentity {
100
100
  * Triggers a new analysis run; returns the run id.
101
101
  */
102
102
  enableCodeScanning(): Promise<string>;
103
+ /**
104
+ * Disables CodeQL default setup. Required when the repo uses an advanced
105
+ * CodeQL workflow instead — GitHub rejects SARIF from advanced workflows
106
+ * while default setup is active.
107
+ */
108
+ disableDefaultCodeScanning(): Promise<void>;
103
109
  listWorkflowFiles(): Promise<string[]>;
104
110
  readWorkflowFile(name: string): Promise<string | null>;
105
111
  writeWorkflowFile(name: string, contents: string): Promise<void>;
package/dist/cli.mjs CHANGED
@@ -3765,8 +3765,10 @@ async function runSetup(input) {
3765
3765
  }));
3766
3766
  print(formatStep(steps[steps.length - 1]));
3767
3767
  }
3768
- steps.push(await runStep("source", "enableCodeScanning", dryRun, async () => {
3769
- return await source.enableCodeScanning();
3768
+ const usesAdvancedCodeQL = (config.project.workflows ?? []).map((e) => typeof e === "string" ? e : e.name).includes("codeql");
3769
+ steps.push(await runStep("source", usesAdvancedCodeQL ? "disableDefaultCodeScanning" : "enableCodeScanning", dryRun, async () => {
3770
+ if (usesAdvancedCodeQL) await source.disableDefaultCodeScanning();
3771
+ else return await source.enableCodeScanning();
3770
3772
  }));
3771
3773
  print(formatStep(steps[steps.length - 1]));
3772
3774
  const policy = config.project.repoPolicy;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@theholocron/cli",
3
- "version": "2.0.0-alpha.23",
3
+ "version": "2.0.0-alpha.24",
4
4
  "description": "The Holocron CLI — a pluggable, capability-based orchestrator for spinning up and operating software projects.",
5
5
  "homepage": "https://github.com/theholocron/holocron/tree/main/packages/cli#readme",
6
6
  "bugs": "https://github.com/theholocron/holocron/issues",