Note: This article describes the features available with the version of the CodeQL action and associated CodeQL CLI bundle included in the initial release of this version of GitHub Enterprise Server. If your enterprise uses a more recent version of the CodeQL action, see the GitHub Enterprise Cloud version of this article for information on the latest features. For information on using the latest version, see "Configuring code scanning for your appliance."
If an automatic build of code for a compiled language within your project fails, try removing the autobuild step from your code scanning workflow and adding specific build steps. For more information about replacing the autobuild step, see "Configuring the CodeQL workflow for compiled languages."
If your workflow doesn't explicitly specify the languages to analyze, CodeQL implicitly detects the supported languages in your code base. In this configuration, out of the compiled languages C/C++, C#, and Java, CodeQL only analyzes the language with the most source files. Edit the workflow and add a matrix specifying the languages you want to analyze. The default CodeQL analysis workflow uses such a matrix.
The following extracts from a workflow show how you can use a matrix within the job strategy to specify languages, and then reference each language within the "Initialize CodeQL" step:
jobs:
analyze:
permissions:
security-events: write
actions: read
...
strategy:
fail-fast: false
matrix:
language: ['csharp', 'cpp', 'javascript']
steps:
...
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
For more information about editing the workflow, see "Customizing code scanning."