Merge pull request #228 from advanced-security/v0_5_1

v0.5.1

Author: GeekMasher

.release.yml

@@ -1,6 +1,6 @@
 name: codeql-extractor-iac
 repository: advanced-security/codeql-extractor-iac
-version: 0.5.0
+version: 0.5.1
 
 ecosystems:
   - "Docs"
@@ -31,4 +31,5 @@ locations:
     paths:
       - "action.yml"
     patterns:
-      - '{repository}@v{version}'
+      - "{repository}@v{version}"
+      - "advanced-security/iac-queries@{version}"

Cargo.lock

@@ -26,7 +26,7 @@
 
 ```yaml
 - name: Initialize and Analyze IaC
-  uses: advanced-security/[email protected].0
+  uses: advanced-security/[email protected].1
 ```
 
 **Note:** See full documentation on [Workflows][docs-workflows].

README.md

@@ -12,6 +12,12 @@ inputs:
     default: ${{ github.token }}
     required: false
 
+  rewrite-sarif-tool-name:
+    description: >
+      Whether to rewrite the SARIF tool name to "CodeQL IaC" or keep the original tool name.
+    required: false
+    default: "true"
+
 outputs:
   sarif-results:
     description: >
@@ -22,10 +28,12 @@ runs:
   using: "composite"
   steps:
     - name: "CodeQL Extractor Action"
-      uses: advanced-security/[email protected].0
+      uses: advanced-security/[email protected].5
       id: extractor
       with:
         token: ${{ inputs.token }}
-        extractors: "advanced-security/[email protected].0"
-        packs: advanced-security/iac-queries
+        extractors: "advanced-security/[email protected].1"
+        packs: advanced-security/iac-queries@0.5.1
         languages: "iac"
+        # Other settings
+        sarif-tool-name: ${{ inputs.rewrite-sarif-tool-name }}

action.yml

@@ -1,6 +1,6 @@
 name: "iac"
 display_name: "IAC"
-version: 0.5.0
+version: 0.5.1
 column_kind: "utf8"
 legacy_qltest_extraction: true
 github_api_languages:

codeql-extractor.yml

@@ -6,7 +6,7 @@ To use the CodeQL Extractor, Library, and Queries for Infrastructure as Code, yo
 
 ```yaml
 - name: Initialize and Analyze IaC
-  uses: advanced-security/codeql-extractor-iac@v0.4.1
+  uses: advanced-security/codeql-extractor-iac@v0.5.1
 ```
 
 ### Uploading SARIF files to GitHub
@@ -50,7 +50,7 @@ jobs:
 
       - name: Initialize and Analyze IaC
         id: codeql_iac
-        uses: advanced-security/codeql-extractor-iac@v0.4.1
+        uses: advanced-security/codeql-extractor-iac@v0.5.1
 
       - name: Upload SARIF file
         uses: github/codeql-action/upload-sarif@v3

docs/workflows.md

@@ -1,6 +1,6 @@
 [package]
 name = "codeql-extractor-iac"
-version = "0.5.0"
+version = "0.5.1"
 authors = ["GitHub"]
 
 edition = "2024"

extractor/Cargo.toml

@@ -2,7 +2,7 @@
 library: true
 warnOnImplicitThis: false
 name: advanced-security/iac-all
-version: 0.5.0
+version: 0.5.1
 dependencies:
   codeql/util: ^1.0.12
   codeql/yaml: ^1.0.25

ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/iac-queries
-version: 0.5.0
+version: 0.5.1
 groups: 
   - iac
   - queries