Merge pull request #32 from GitHubSecurityLab/choose-suite

Author: Alvaro Muñoz

.github/action/dist/index.js

@@ -28607,7 +28607,7 @@ async function newCodeQL() {
         language: "yaml",
         path: await findCodeQL(),
         pack: "githubsecuritylab/actions-queries",
-        suite: "codeql-suites/actions-code-scanning.qls",
+        suite: `codeql-suites/${core.getInput("suite") || "actions-code-scanning"}.qls`,
         source_root: core.getInput("source-root"),
         output: core.getInput("sarif"),
     };

.github/action/src/codeql.ts

@@ -25,7 +25,7 @@ export async function newCodeQL(): Promise<CodeQLConfig> {
     language: "yaml",
     path: await findCodeQL(),
     pack: "githubsecuritylab/actions-queries",
-    suite: "codeql-suites/actions-code-scanning.qls",
+    suite: `codeql-suites/${core.getInput("suite") || "actions-code-scanning"}.qls`,
     source_root: core.getInput("source-root"),
     output: core.getInput("sarif"),
   };

action.yml

@@ -14,6 +14,10 @@ inputs:
     description: "SARIF File Output"
     default: "codeql-actions.sarif"
 
+  suite:
+    description: "CodeQL Suite to run"
+    default: "actions-code-scanning"
+
 runs:
   using: 'composite'
   steps: