Delete the results directory in between runs. by chrisgavin · Pull Request #955 · github/codeql-action (original) (raw)

The default results directory of the CodeQL Action is in a non-ephemeral directory. This means it will be persisted between runs. The CodeQL Action also does not keep track of what languages it has produced results for in this run. That means that if a language is present in one run, but absent in the next, the CodeQL Action will upload it regardless.

By deleting the results directory we ensure that stale results will never be used.

I couldn't find a particularly good place to add a test for this (which isn't that surprising, since it's very much an implementation detail), but I've tested manually and verified it's correctly no longer uploading stale results.

Merge / deployment checklist