[BUG]: Advanced Security Initialization Task always logs warning when using a config file #21353
Description
New issue checklist
- I searched for existing GitHub issues
- I read pipeline troubleshooting guide
- I checked how to collect logs
Task name
No response
Task version
1.1.329
Issue Description
When using the Azure DevOps pipeline task AdvancedSecurity-Codeql-Init@1, and including a config file with the configfilepath parameter a warning is always output to the build pipeline when you run the CodeQL task (AdvancedSecurity-Codeql-Analyze) later.
"The query suite defined through pipeline variable or input task is overwritten by the provided config file."
Firstly the warning doesn't even seem correct. In our config file we have defined to use security-and-quality with a queries entry, and yet the pipeline log states "Running builtin query pack javascript-security-extended.qls for javascript". I believe this is because we haven't included "disable-default-queries: true". While I actually dont mind this behaviour, it does make the warning incorrect.
Secondly it appears like no matter what you do, if you specify a config file you must always receive this warning. That causes noise when looking at pipeline results - we aim for pipeline runs with 0 errors/warnings. The act of specifying a configuration file is not a problem/warning, it is expected.
I can't see the source in this repo, but as it is a Microsoft-supplied task, that is available out-of-the-box with Azure DevOps I assume this is the right/only place to log bugs.
Environment type (Please select at least one enviroment where you face this issue)
- Self-Hosted
- Microsoft Hosted
- VMSS Pool
- Container
Azure DevOps Server type
dev.azure.com (formerly visualstudio.com)
Azure DevOps Server Version (if applicable)
No response
Operation system
Ubuntu 24.04
Relevant log output
==============================================================================
Task : Advanced Security Perform CodeQL analysis
Description : Finalizes the CodeQL database and runs the analysis queries.
Version : 1.1.329
Author : Microsoft Corporation
Help : https://aka.ms/advanced-security/code-scanning/detection
==============================================================================
Session Id=3757fb66-ef67-407e-acb2-74f7e6605d05
Starting database finalization.
Database finalization is a time consuming process and may take a while to complete.
Finalizing csharp
/opt/hostedtoolcache/CodeQL/2.23.0/x64/codeql/codeql database finalize --finalize-dataset --threads=0 --ram=26136 /mnt/storage/sdc/Build/FeatureWave01/CSharp/_temp/advancedsecurity.codeql/d/csharp
Running pre-finalize script /opt/hostedtoolcache/CodeQL/2.23.0/x64/codeql/csharp/tools/pre-finalize.sh in /mnt/storage/sdc/Build/FeatureWave01/CSharp/1/s.
Running command in /mnt/storage/sdc/Build/FeatureWave01/CSharp/1/s: [/opt/hostedtoolcache/CodeQL/2.23.0/x64/codeql/csharp/tools/pre-finalize.sh]
Pre-finalize script /opt/hostedtoolcache/CodeQL/2.23.0/x64/codeql/csharp/tools/pre-finalize.sh completed in 7558 ms.
Running TRAP import for CodeQL database at /mnt/storage/sdc/Build/FeatureWave01/CSharp/_temp/advancedsecurity.codeql/d/csharp...
Importing TRAP files
Merging relations
Finished writing database (relations: 59.63 MiB; string pool: 22.03 MiB).
TRAP import complete (13.2s).
Finished zipping source archive (6.74 MiB).
Starting query analysis.
Running builtin query pack csharp-security-extended.qls for csharp
##[warning] The query suite defined through pipeline variable or input task is overwritten by the provided config file.
/opt/hostedtoolcache/CodeQL/2.23.0/x64/codeql/codeql database analyze --min-disk-free=1024 --output=/mnt/storage/sdc/Build/FeatureWave01/CSharp/_temp/advancedsecurity.codeql/out/440.64246.Build_DotNet_Components.c2d1b8.csharp.builtin.sarif --format=sarifv2.1.0 --sarif-add-query-help --sarif-group-rules-by-pack --sarif-multicause-markdown --print-diagnostics-summary --print-metrics-summary --threads=0 --ram=26136 /mnt/storage/sdc/Build/FeatureWave01/CSharp/_temp/advancedsecurity.codeql/d/csharp
Running queries.Full task logs with system.debug enabled
2025-10-01T08:12:04.7781287Z ##[debug]Evaluating condition for step: 'Advanced Security Initialization'
2025-10-01T08:12:04.7781825Z ##[debug]Evaluating: SucceededNode()
2025-10-01T08:12:04.7782019Z ##[debug]Evaluating SucceededNode:
2025-10-01T08:12:04.7782359Z ##[debug]=> True
2025-10-01T08:12:04.7782537Z ##[debug]Result: True
2025-10-01T08:12:04.7782920Z ##[section]Starting: Advanced Security Initialization
2025-10-01T08:12:04.7787949Z ==============================================================================
2025-10-01T08:12:04.7788037Z Task : Advanced Security Initialize CodeQL
2025-10-01T08:12:04.7788104Z Description : Initializes the CodeQL database in preparation for building.
2025-10-01T08:12:04.7788180Z Version : 1.1.329
2025-10-01T08:12:04.7788227Z Author : Microsoft Corporation
2025-10-01T08:12:04.7788286Z Help : https://aka.ms/advancedsecurity/code-scanning/detection
2025-10-01T08:12:04.7788348Z ==============================================================================
2025-10-01T08:12:04.8354703Z ##[debug]Using node path: /usr/local/vss-agent/4.261.0/externals/node20_1/bin/node
2025-10-01T08:12:05.0051986Z ##[debug]agent.TempDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/_temp
2025-10-01T08:12:05.0057592Z ##[debug]loading inputs and endpoints
2025-10-01T08:12:05.0061701Z ##[debug]loading INPUT_ENABLEAUTOMATICCODEQLINSTALL
2025-10-01T08:12:05.0074404Z ##[debug]loading INPUT_LANGUAGES
2025-10-01T08:12:05.0075712Z ##[debug]loading INPUT_QUERYSUITE
2025-10-01T08:12:05.0076446Z ##[debug]loading INPUT_BUILDTYPE
2025-10-01T08:12:05.0077288Z ##[debug]loading INPUT_LOGLEVEL
2025-10-01T08:12:05.0078115Z ##[debug]loading INPUT_CONFIGFILEPATH
2025-10-01T08:12:05.0078968Z ##[debug]loading ENDPOINT_AUTH_SYSTEMVSSCONNECTION
2025-10-01T08:12:05.0080921Z ##[debug]loading ENDPOINT_AUTH_SCHEME_SYSTEMVSSCONNECTION
2025-10-01T08:12:05.0081646Z ##[debug]loading ENDPOINT_AUTH_PARAMETER_SYSTEMVSSCONNECTION_ACCESSTOKEN
2025-10-01T08:12:05.0086263Z ##[debug]loading SECRET_USER_PILOT_API_KEY
2025-10-01T08:12:05.0087756Z ##[debug]loading SECRET_DATADOGAPIKEY
2025-10-01T08:12:05.0089661Z ##[debug]loading SECRET_POSTHOG_API_KEY
2025-10-01T08:12:05.0091346Z ##[debug]loading SECRET_SYSTEM_ACCESSTOKEN
2025-10-01T08:12:05.0092378Z ##[debug]loaded 13
2025-10-01T08:12:05.0096069Z ##[debug]Agent.ProxyUrl=undefined
2025-10-01T08:12:05.0097251Z ##[debug]Agent.CAInfo=undefined
2025-10-01T08:12:05.0097696Z ##[debug]Agent.ClientCert=undefined
2025-10-01T08:12:05.0098147Z ##[debug]Agent.SkipCertValidation=undefined
2025-10-01T08:12:05.0546094Z ##[debug]advancedsecurity.codeql.debug=undefined
2025-10-01T08:12:05.0546959Z ##[debug]advancedsecurity.codeql.addsnippetstoresults=undefined
2025-10-01T08:12:05.0547421Z ##[debug]advancedsecurity.codeql.debug.uploadall=undefined
2025-10-01T08:12:05.0547870Z ##[debug]advancedsecurity.codeql.debug.uploadsarif=undefined
2025-10-01T08:12:05.0548320Z ##[debug]advancedsecurity.codeql.buildidentifier=undefined
2025-10-01T08:12:05.0548808Z ##[debug]advancedsecurity.codeql.autobuildalllanguages=undefined
2025-10-01T08:12:05.0549278Z ##[debug]advancedsecurity.codeql.artifactscontainername=undefined
2025-10-01T08:12:05.0549705Z ##[debug]advancedsecurity.codeql.initialized=undefined
2025-10-01T08:12:05.0550054Z ##[debug]advancedsecurity.codeql.results.published=undefined
2025-10-01T08:12:05.0550545Z ##[debug]advancedsecurity.codeql.buildtype=undefined
2025-10-01T08:12:05.0550997Z ##[debug]advancedsecurity.publish.repository.infer=undefined
2025-10-01T08:12:05.0551352Z ##[debug]advancedsecurity.publish.repository=undefined
2025-10-01T08:12:05.0551642Z ##[debug]advancedsecurity.publish.allowmissingpartialfingerprints=undefined
2025-10-01T08:12:05.0551914Z ##[debug]advancedsecurity.codeql.ignorepaths=undefined
2025-10-01T08:12:05.0552260Z ##[debug]advancedsecurity.codeql.includepaths=undefined
2025-10-01T08:12:05.0552653Z ##[debug]advancedsecurity.codeql.sourcesfolder=undefined
2025-10-01T08:12:05.0553032Z ##[debug]advancedsecurity.codeql.logLevel=undefined
2025-10-01T08:12:05.0553434Z ##[debug]set advancedsecurity.codeql.logLevel=0
2025-10-01T08:12:05.0560318Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.logLevel;isOutput=false;issecret=false;]0
2025-10-01T08:12:05.0560978Z ##[debug]advancedsecurity.codeql.ram=undefined
2025-10-01T08:12:05.0561492Z ##[debug]set advancedsecurity.codeql.ram=26120.00
2025-10-01T08:12:05.0562142Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.ram;isOutput=false;issecret=false;]26120.00
2025-10-01T08:12:05.0562654Z ##[debug]advancedsecurity.codeql.threads=undefined
2025-10-01T08:12:05.0563074Z ##[debug]advancedsecurity.codeql.language=undefined
2025-10-01T08:12:05.0563344Z ##[debug]advancedsecurity.codeql.querysuite=undefined
2025-10-01T08:12:05.0563610Z ##[debug]set advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:12:05.0564249Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.querysuite;isOutput=false;issecret=false;]security-extended
2025-10-01T08:12:05.0564784Z ##[debug]advancedsecurity.codeql.configfilepath=undefined
2025-10-01T08:12:05.0565085Z ##[debug]advancedsecurity.codeql.toolsdirectory=undefined
2025-10-01T08:12:05.0565358Z ##[debug]Build.Repository.LocalPath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:12:05.0565657Z ##[debug]advancedsecurity.codeql.debug=undefined
2025-10-01T08:12:05.0565921Z ##[debug]advancedsecurity.codeql.addsnippetstoresults=undefined
2025-10-01T08:12:05.0566284Z ##[debug]advancedsecurity.codeql.debug.uploadall=undefined
2025-10-01T08:12:05.0566754Z ##[debug]advancedsecurity.codeql.debug.uploadsarif=undefined
2025-10-01T08:12:05.0567034Z ##[debug]advancedsecurity.codeql.buildidentifier=undefined
2025-10-01T08:12:05.0567299Z ##[debug]advancedsecurity.codeql.autobuildalllanguages=undefined
2025-10-01T08:12:05.0567566Z ##[debug]advancedsecurity.codeql.artifactscontainername=undefined
2025-10-01T08:12:05.0567831Z ##[debug]advancedsecurity.codeql.initialized=undefined
2025-10-01T08:12:05.0568089Z ##[debug]advancedsecurity.codeql.results.published=undefined
2025-10-01T08:12:05.0568355Z ##[debug]advancedsecurity.codeql.buildtype=undefined
2025-10-01T08:12:05.0568610Z ##[debug]advancedsecurity.publish.repository.infer=undefined
2025-10-01T08:12:05.0568875Z ##[debug]advancedsecurity.publish.repository=undefined
2025-10-01T08:12:05.0569139Z ##[debug]advancedsecurity.publish.allowmissingpartialfingerprints=undefined
2025-10-01T08:12:05.0569405Z ##[debug]advancedsecurity.codeql.ignorepaths=undefined
2025-10-01T08:12:05.0569659Z ##[debug]advancedsecurity.codeql.includepaths=undefined
2025-10-01T08:12:05.0570053Z ##[debug]advancedsecurity.codeql.sourcesfolder=undefined
2025-10-01T08:12:05.0570312Z ##[debug]advancedsecurity.codeql.logLevel=0
2025-10-01T08:12:05.0570618Z ##[debug]set advancedsecurity.codeql.logLevel=0
2025-10-01T08:12:05.0573003Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.logLevel;isOutput=false;issecret=false;]0
2025-10-01T08:12:05.0573359Z ##[debug]advancedsecurity.codeql.ram=26120.00
2025-10-01T08:12:05.0573625Z ##[debug]set advancedsecurity.codeql.ram=26120.00
2025-10-01T08:12:05.0574219Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.ram;isOutput=false;issecret=false;]26120.00
2025-10-01T08:12:05.0574515Z ##[debug]advancedsecurity.codeql.threads=undefined
2025-10-01T08:12:05.0574775Z ##[debug]advancedsecurity.codeql.language=undefined
2025-10-01T08:12:05.0575041Z ##[debug]advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:12:05.0575305Z ##[debug]set advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:12:05.0575707Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.querysuite;isOutput=false;issecret=false;]security-extended
2025-10-01T08:12:05.0576003Z ##[debug]advancedsecurity.codeql.configfilepath=undefined
2025-10-01T08:12:05.0576258Z ##[debug]advancedsecurity.codeql.toolsdirectory=undefined
2025-10-01T08:12:05.0576565Z ##[debug]check path : /mnt/storage/sdc/Build/FeatureWave01/Angular/_tasks/AdvancedSecurity-Codeql-Init_a34f8529-3300-494f-a460-963e3f5f6928/1.1.329/task.json
2025-10-01T08:12:05.0577083Z ##[debug]adding resource file: /mnt/storage/sdc/Build/FeatureWave01/Angular/_tasks/AdvancedSecurity-Codeql-Init_a34f8529-3300-494f-a460-963e3f5f6928/1.1.329/task.json
2025-10-01T08:12:05.0577588Z ##[debug]system.culture=en-US
2025-10-01T08:12:05.0578027Z ##[debug]Agent.TempDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/temp
2025-10-01T08:12:05.0578293Z ##[debug]Build.Repository.Provider=TfsGit
2025-10-01T08:12:05.0578666Z ##[debug]Build.SourcesDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:12:05.0579187Z ##[debug]System.TeamProjectId=4409bc19-49e4-474c-a415-52c0096da553
2025-10-01T08:12:05.0579572Z ##[debug]System.CollectionUri=https://enate.visualstudio.com/
2025-10-01T08:12:05.0581918Z ##[debug]Agent.ProxyUrl=undefined
2025-10-01T08:12:05.0582436Z ##[debug]Build.Repository.Uri=https://enate.visualstudio.com/Enate/_git/Core%20-%20Feature%20Waves
2025-10-01T08:12:05.0582934Z ##[debug]Build.Repository.ID=653e4fe1-32bd-45e3-8666-a8088c1d381e
2025-10-01T08:12:05.0583357Z ##[debug]Build.SourceBranch=refs/heads/feature/single_csharp_build
2025-10-01T08:12:05.0583689Z ##[debug]Build.SourceBranchName=single_csharp_build
2025-10-01T08:12:05.0584251Z ##[debug]Build.SourceVersion=7e26f82c2bf274fb4f8c13937dacca3662c95731
2025-10-01T08:12:05.0584574Z ##[debug]Build.BuildId=64279
2025-10-01T08:12:05.0584819Z ##[debug]Build.BuildUri=vstfs:///Build/Build/64279
2025-10-01T08:12:05.0585062Z ##[debug]System.DefinitionId=440
2025-10-01T08:12:05.0585393Z ##[debug]Build.DefinitionName=Core - Feature Waves (440)
2025-10-01T08:12:05.0585853Z ##[debug]Build.DefinitionVersion=1
2025-10-01T08:12:05.0586143Z ##[debug]Build.Reason=Manual
2025-10-01T08:12:05.0586391Z ##[debug]System.PhaseId=a8a019ee-bbff-5619-65e7-7c430a5da7f5
2025-10-01T08:12:05.0586655Z ##[debug]System.PhaseName=Build_Angular_UI
2025-10-01T08:12:05.0586910Z ##[debug]System.CollectionId=6b2f7693-29a9-4156-8dff-610fbb59b38b
2025-10-01T08:12:05.0587160Z ##[debug]System.TeamProject=Enate
2025-10-01T08:12:05.0587401Z ##[debug]Build.Repository.Name=Core - Feature Waves
2025-10-01T08:12:05.0587676Z ##[debug]Build.Repository.Uri=https://enate.visualstudio.com/Enate/_git/Core%20-%20Feature%20Waves
2025-10-01T08:12:05.0587940Z ##[debug]System.TeamProject=Enate
2025-10-01T08:12:05.0588200Z ##[debug]System.DefaultWorkingDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:12:05.0589382Z Session Id=a35ee8ea-b061-4b23-9047-316d6a589c75
2025-10-01T08:12:05.0593235Z ##[debug]set GHAZDO_VERSION=1.1.329
2025-10-01T08:12:05.0594002Z ##[debug]Processed: ##vso[task.setvariable variable=GHAZDO_VERSION;isOutput=false;issecret=false;]1.1.329
2025-10-01T08:12:05.0597887Z ##[debug]languages=javascript
2025-10-01T08:12:05.0598324Z ##[debug]ram=undefined
2025-10-01T08:12:05.0598679Z ##[debug]threads=undefined
2025-10-01T08:12:05.0599091Z ##[debug]querysuite=Select a query suite...
2025-10-01T08:12:05.0599539Z ##[debug]codeqlpathstoignore=undefined
2025-10-01T08:12:05.0599959Z ##[debug]codeqlpathstoinclude=undefined
2025-10-01T08:12:05.0600392Z ##[debug]loglevel=
2025-10-01T08:12:05.0600801Z ##[debug]sourcesfolder=undefined
2025-10-01T08:12:05.0601288Z ##[debug]configfilepath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:12:05.0601633Z ##[debug]codeqltoolsdirectory=undefined
2025-10-01T08:12:05.0602165Z ##[debug]enableAutomaticCodeQLInstall=false
2025-10-01T08:12:05.0603340Z ##[debug]buildtype=Manual
2025-10-01T08:12:05.0604222Z ##[debug]buildtype=Manual
2025-10-01T08:12:05.0604658Z ##[debug]set advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:12:05.0605335Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.querysuite;isOutput=false;issecret=false;]security-extended
2025-10-01T08:12:05.0605839Z ##[debug]set advancedsecurity.codeql.language=javascript
2025-10-01T08:12:05.0606454Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.language;isOutput=false;issecret=false;]javascript
2025-10-01T08:12:05.0630745Z ##[debug]set advancedsecurity.codeql.configfilepath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:12:05.0631666Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.configfilepath;isOutput=false;issecret=false;]/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:12:05.0632117Z ##[debug]set advancedsecurity.codeql.buildtype=manual
2025-10-01T08:12:05.0632482Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.buildtype;isOutput=false;issecret=false;]manual
2025-10-01T08:12:05.0639759Z ##[debug]GITHUB_TOKEN=undefined
2025-10-01T08:12:05.0643989Z ##[debug]which '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:12:05.0646163Z ##[debug]found: '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:12:05.0650393Z [command]/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql database init --codescanning-config=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml --db-cluster /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d --source-root=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s --calculate-baseline --trace-process-mode=azure-pipelines --language=javascript
2025-10-01T08:12:06.1400788Z Package install location: /home/AzDevOps/.codeql/packages
2025-10-01T08:12:06.1401559Z Nothing downloaded.
2025-10-01T08:12:07.2196845Z Calculating baseline information in /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:12:07.4576407Z Running command in /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s: [/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/javascript/tools/configure-baseline.sh]
2025-10-01T08:12:07.4873702Z Running command in /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s: [/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/actions/tools/configure-baseline.sh]
2025-10-01T08:12:07.4935812Z Calculated baseline information for languages: actions, javascript (273ms).
2025-10-01T08:12:10.4520493Z ##[debug]Agent environment resources - Disk: / Available 18023.59 MB out of 73325.30 MB, Memory: Used 1725.00 MB out of 32097.00 MB, CPU: Usage 15.01%
2025-10-01T08:12:11.9632241Z Resolving extractor javascript.
2025-10-01T08:12:11.9664848Z Successfully loaded extractor JavaScript/TypeScript (javascript) from /opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/javascript.
2025-10-01T08:12:11.9857254Z Created skeleton CodeQL database at /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d/javascript. This in-progress database is ready to be populated by an extractor.
2025-10-01T08:12:12.0113292Z
2025-10-01T08:12:12.0126682Z None of the languages are traced languages. javascript
2025-10-01T08:12:12.0127069Z There are no traced languages, so the tracers will not be enabled.
2025-10-01T08:12:12.0127826Z ##[debug]set advancedsecurity.codeql.initialized=true
2025-10-01T08:12:12.0128613Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.initialized;isOutput=false;issecret=false;]true
2025-10-01T08:12:12.0129085Z The CodeQL database has been initialized.
2025-10-01T08:12:12.0129204Z
2025-10-01T08:12:12.0129546Z ====================================================================================================
2025-10-01T08:12:12.0129756Z Analyzing CodeQL execution results.
2025-10-01T08:12:12.0130286Z The Initialize task succeeded without any issues.
2025-10-01T08:12:12.0131043Z ====================================================================================================
2025-10-01T08:12:12.0131264Z
2025-10-01T08:12:12.0131518Z Learn more about the scan for the CodeQL build tasks:
2025-10-01T08:12:12.0131833Z https://aka.ms/advanced-security/code-scanning/detection
2025-10-01T08:12:12.0131974Z
2025-10-01T08:12:12.0441613Z ##[debug]Processed: ##vso[telemetry.publish area=AdvancedSecurity;feature=AdvancedSecurity-Codeql-Init;]{"taskName":"AdvancedSecurity-Codeql-Init","startTime":"2025-10-01T08:12:05.059Z","sessionId":"a35ee8ea-b061-4b23-9047-316d6a589c75","buildDefinitionIdentifier":"4409bc19-49e4-474c-a415-52c0096da553:440","buildIdentifier":"4409bc19-49e4-474c-a415-52c0096da553:64279","debug":false,"hasPathsToInclude":false,"hasPathsToIgnore":false,"addSnippetsToResults":false,"debugUploadAll":false,"debugUploadSarif":false,"logLevel":0,"autobuildAllLanguages":false,"querySuite":"security-extended","languages":["javascript"],"isConfigFileProvided":true,"isAutomaticCodeQLDetectionEnabled":false,"codeqlVersion":"CodeQL/2.23.1/x64","success":true,"endTime":"2025-10-01T08:12:12.013Z","totalSeconds":6.954}
2025-10-01T08:12:12.0445294Z ##[section]Finishing: Advanced Security Initialization
2025-10-01T08:15:50.7938695Z ##[debug]Evaluating condition for step: 'Advanced Security Code Analysis'
2025-10-01T08:15:50.7939260Z ##[debug]Evaluating: SucceededNode()
2025-10-01T08:15:50.7939464Z ##[debug]Evaluating SucceededNode:
2025-10-01T08:15:50.7939795Z ##[debug]=> True
2025-10-01T08:15:50.7939979Z ##[debug]Result: True
2025-10-01T08:15:50.7940390Z ##[section]Starting: Advanced Security Code Analysis
2025-10-01T08:15:50.7944571Z ==============================================================================
2025-10-01T08:15:50.7944675Z Task : Advanced Security Perform CodeQL analysis
2025-10-01T08:15:50.7944733Z Description : Finalizes the CodeQL database and runs the analysis queries.
2025-10-01T08:15:50.7944810Z Version : 1.1.329
2025-10-01T08:15:50.7944857Z Author : Microsoft Corporation
2025-10-01T08:15:50.7944914Z Help : https://aka.ms/advanced-security/code-scanning/detection
2025-10-01T08:15:50.7944979Z ==============================================================================
2025-10-01T08:15:50.8572021Z ##[debug]Using node path: /usr/local/vss-agent/4.261.0/externals/node20_1/bin/node
2025-10-01T08:15:51.0184566Z ##[debug]agent.TempDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/_temp
2025-10-01T08:15:51.0190983Z ##[debug]loading inputs and endpoints
2025-10-01T08:15:51.0195709Z ##[debug]loading INPUT_WAITFORPROCESSING
2025-10-01T08:15:51.0209046Z ##[debug]loading INPUT_WAITFORPROCESSINGINTERVAL
2025-10-01T08:15:51.0210066Z ##[debug]loading INPUT_WAITFORPROCESSINGTIMEOUT
2025-10-01T08:15:51.0211711Z ##[debug]loading ENDPOINT_AUTH_SYSTEMVSSCONNECTION
2025-10-01T08:15:51.0212981Z ##[debug]loading ENDPOINT_AUTH_SCHEME_SYSTEMVSSCONNECTION
2025-10-01T08:15:51.0214390Z ##[debug]loading ENDPOINT_AUTH_PARAMETER_SYSTEMVSSCONNECTION_ACCESSTOKEN
2025-10-01T08:15:51.0218066Z ##[debug]loading SECRET_USER_PILOT_API_KEY
2025-10-01T08:15:51.0220367Z ##[debug]loading SECRET_DATADOGAPIKEY
2025-10-01T08:15:51.0221720Z ##[debug]loading SECRET_POSTHOG_API_KEY
2025-10-01T08:15:51.0223692Z ##[debug]loading SECRET_SYSTEM_ACCESSTOKEN
2025-10-01T08:15:51.0226042Z ##[debug]loaded 10
2025-10-01T08:15:51.0229980Z ##[debug]Agent.ProxyUrl=undefined
2025-10-01T08:15:51.0230754Z ##[debug]Agent.CAInfo=undefined
2025-10-01T08:15:51.0231284Z ##[debug]Agent.ClientCert=undefined
2025-10-01T08:15:51.0231709Z ##[debug]Agent.SkipCertValidation=undefined
2025-10-01T08:15:51.0885370Z ##[debug]advancedsecurity.codeql.debug=undefined
2025-10-01T08:15:51.0886017Z ##[debug]advancedsecurity.codeql.addsnippetstoresults=undefined
2025-10-01T08:15:51.0886542Z ##[debug]advancedsecurity.codeql.debug.uploadall=undefined
2025-10-01T08:15:51.0887000Z ##[debug]advancedsecurity.codeql.debug.uploadsarif=undefined
2025-10-01T08:15:51.0887502Z ##[debug]advancedsecurity.codeql.buildidentifier=undefined
2025-10-01T08:15:51.0887992Z ##[debug]advancedsecurity.codeql.autobuildalllanguages=undefined
2025-10-01T08:15:51.0888470Z ##[debug]advancedsecurity.codeql.artifactscontainername=undefined
2025-10-01T08:15:51.0888943Z ##[debug]advancedsecurity.codeql.initialized=true
2025-10-01T08:15:51.0889430Z ##[debug]advancedsecurity.codeql.results.published=undefined
2025-10-01T08:15:51.0889919Z ##[debug]advancedsecurity.codeql.buildtype=manual
2025-10-01T08:15:51.0890388Z ##[debug]advancedsecurity.publish.repository.infer=undefined
2025-10-01T08:15:51.0890881Z ##[debug]advancedsecurity.publish.repository=undefined
2025-10-01T08:15:51.0891377Z ##[debug]advancedsecurity.publish.allowmissingpartialfingerprints=undefined
2025-10-01T08:15:51.0891837Z ##[debug]advancedsecurity.codeql.ignorepaths=undefined
2025-10-01T08:15:51.0892313Z ##[debug]advancedsecurity.codeql.includepaths=undefined
2025-10-01T08:15:51.0892780Z ##[debug]advancedsecurity.codeql.sourcesfolder=undefined
2025-10-01T08:15:51.0893239Z ##[debug]advancedsecurity.codeql.logLevel=0
2025-10-01T08:15:51.0894411Z ##[debug]set advancedsecurity.codeql.logLevel=0
2025-10-01T08:15:51.0895412Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.logLevel;isOutput=false;issecret=false;]0
2025-10-01T08:15:51.0896335Z ##[debug]advancedsecurity.codeql.ram=26120.00
2025-10-01T08:15:51.0896831Z ##[debug]set advancedsecurity.codeql.ram=26120.00
2025-10-01T08:15:51.0897561Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.ram;isOutput=false;issecret=false;]26120.00
2025-10-01T08:15:51.0898111Z ##[debug]advancedsecurity.codeql.threads=undefined
2025-10-01T08:15:51.0898561Z ##[debug]advancedsecurity.codeql.language=javascript
2025-10-01T08:15:51.0900804Z ##[debug]set advancedsecurity.codeql.language=javascript
2025-10-01T08:15:51.0901607Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.language;isOutput=false;issecret=false;]javascript
2025-10-01T08:15:51.0902190Z ##[debug]advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:15:51.0902693Z ##[debug]set advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:15:51.0903378Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.querysuite;isOutput=false;issecret=false;]security-extended
2025-10-01T08:15:51.0904173Z ##[debug]advancedsecurity.codeql.configfilepath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:15:51.0930461Z ##[debug]set advancedsecurity.codeql.configfilepath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:15:51.0931519Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.configfilepath;isOutput=false;issecret=false;]/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:15:51.0932362Z ##[debug]advancedsecurity.codeql.toolsdirectory=undefined
2025-10-01T08:15:51.0932825Z ##[debug]Build.Repository.LocalPath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:15:51.0933326Z ##[debug]advancedsecurity.codeql.debug=undefined
2025-10-01T08:15:51.0933807Z ##[debug]advancedsecurity.codeql.addsnippetstoresults=undefined
2025-10-01T08:15:51.0934482Z ##[debug]advancedsecurity.codeql.debug.uploadall=undefined
2025-10-01T08:15:51.0934968Z ##[debug]advancedsecurity.codeql.debug.uploadsarif=undefined
2025-10-01T08:15:51.0935429Z ##[debug]advancedsecurity.codeql.buildidentifier=undefined
2025-10-01T08:15:51.0935917Z ##[debug]advancedsecurity.codeql.autobuildalllanguages=undefined
2025-10-01T08:15:51.0936409Z ##[debug]advancedsecurity.codeql.artifactscontainername=undefined
2025-10-01T08:15:51.0936850Z ##[debug]advancedsecurity.codeql.initialized=true
2025-10-01T08:15:51.0937316Z ##[debug]advancedsecurity.codeql.results.published=undefined
2025-10-01T08:15:51.0937791Z ##[debug]advancedsecurity.codeql.buildtype=manual
2025-10-01T08:15:51.0938262Z ##[debug]advancedsecurity.publish.repository.infer=undefined
2025-10-01T08:15:51.0938751Z ##[debug]advancedsecurity.publish.repository=undefined
2025-10-01T08:15:51.0939276Z ##[debug]advancedsecurity.publish.allowmissingpartialfingerprints=undefined
2025-10-01T08:15:51.0939802Z ##[debug]advancedsecurity.codeql.ignorepaths=undefined
2025-10-01T08:15:51.0940322Z ##[debug]advancedsecurity.codeql.includepaths=undefined
2025-10-01T08:15:51.0940842Z ##[debug]advancedsecurity.codeql.sourcesfolder=undefined
2025-10-01T08:15:51.0941351Z ##[debug]advancedsecurity.codeql.logLevel=0
2025-10-01T08:15:51.0941903Z ##[debug]set advancedsecurity.codeql.logLevel=0
2025-10-01T08:15:51.0942626Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.logLevel;isOutput=false;issecret=false;]0
2025-10-01T08:15:51.0943203Z ##[debug]advancedsecurity.codeql.ram=26120.00
2025-10-01T08:15:51.0943646Z ##[debug]set advancedsecurity.codeql.ram=26120.00
2025-10-01T08:15:51.0944513Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.ram;isOutput=false;issecret=false;]26120.00
2025-10-01T08:15:51.0945029Z ##[debug]advancedsecurity.codeql.threads=undefined
2025-10-01T08:15:51.0945535Z ##[debug]advancedsecurity.codeql.language=javascript
2025-10-01T08:15:51.0945987Z ##[debug]set advancedsecurity.codeql.language=javascript
2025-10-01T08:15:51.0946788Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.language;isOutput=false;issecret=false;]javascript
2025-10-01T08:15:51.0947592Z ##[debug]advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:15:51.0948096Z ##[debug]set advancedsecurity.codeql.querysuite=security-extended
2025-10-01T08:15:51.0948903Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.querysuite;isOutput=false;issecret=false;]security-extended
2025-10-01T08:15:51.0949483Z ##[debug]advancedsecurity.codeql.configfilepath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:15:51.0950120Z ##[debug]set advancedsecurity.codeql.configfilepath=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:15:51.0950966Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.configfilepath;isOutput=false;issecret=false;]/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/build/CodeQL/configFile.yml
2025-10-01T08:15:51.0951633Z ##[debug]advancedsecurity.codeql.toolsdirectory=undefined
2025-10-01T08:15:51.0952186Z ##[debug]check path : /mnt/storage/sdc/Build/FeatureWave01/Angular/_tasks/AdvancedSecurity-Codeql-Analyze_a9efc1ef-3900-494f-a460-963e3f5f6928/1.1.329/task.json
2025-10-01T08:15:51.0952829Z ##[debug]adding resource file: /mnt/storage/sdc/Build/FeatureWave01/Angular/_tasks/AdvancedSecurity-Codeql-Analyze_a9efc1ef-3900-494f-a460-963e3f5f6928/1.1.329/task.json
2025-10-01T08:15:51.0953544Z ##[debug]system.culture=en-US
2025-10-01T08:15:51.0959854Z ##[debug]Agent.TempDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/_temp
2025-10-01T08:15:51.0964703Z ##[debug]Build.Repository.Provider=TfsGit
2025-10-01T08:15:51.0965238Z ##[debug]Build.SourcesDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:15:51.0965711Z ##[debug]System.TeamProjectId=4409bc19-49e4-474c-a415-52c0096da553
2025-10-01T08:15:51.0966187Z ##[debug]System.CollectionUri=https://enate.visualstudio.com/
2025-10-01T08:15:51.0969505Z ##[debug]Agent.ProxyUrl=undefined
2025-10-01T08:15:51.0970102Z ##[debug]Build.Repository.Uri=https://enate.visualstudio.com/Enate/_git/Core%20-%20Feature%20Waves
2025-10-01T08:15:51.0970608Z ##[debug]Build.Repository.ID=653e4fe1-32bd-45e3-8666-a8088c1d381e
2025-10-01T08:15:51.0971089Z ##[debug]Build.SourceBranch=refs/heads/feature/single_csharp_build
2025-10-01T08:15:51.0971566Z ##[debug]Build.SourceBranchName=single_csharp_build
2025-10-01T08:15:51.0972050Z ##[debug]Build.SourceVersion=7e26f82c2bf274fb4f8c13937dacca3662c95731
2025-10-01T08:15:51.0972503Z ##[debug]Build.BuildId=64279
2025-10-01T08:15:51.0972931Z ##[debug]Build.BuildUri=vstfs:///Build/Build/64279
2025-10-01T08:15:51.0973364Z ##[debug]System.DefinitionId=440
2025-10-01T08:15:51.0973815Z ##[debug]Build.DefinitionName=Core - Feature Waves (440)
2025-10-01T08:15:51.0974459Z ##[debug]Build.DefinitionVersion=1
2025-10-01T08:15:51.0974921Z ##[debug]Build.Reason=Manual
2025-10-01T08:15:51.0975380Z ##[debug]System.PhaseId=a8a019ee-bbff-5619-65e7-7c430a5da7f5
2025-10-01T08:15:51.0975860Z ##[debug]System.PhaseName=Build_Angular_UI
2025-10-01T08:15:51.0976357Z ##[debug]System.CollectionId=6b2f7693-29a9-4156-8dff-610fbb59b38b
2025-10-01T08:15:51.0976819Z ##[debug]System.TeamProject=Enate
2025-10-01T08:15:51.0977284Z ##[debug]Build.Repository.Name=Core - Feature Waves
2025-10-01T08:15:51.0977790Z ##[debug]Build.Repository.Uri=https://enate.visualstudio.com/Enate/_git/Core%20-%20Feature%20Waves
2025-10-01T08:15:51.0978283Z ##[debug]System.TeamProject=Enate
2025-10-01T08:15:51.0978752Z ##[debug]System.DefaultWorkingDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:15:51.0979350Z Session Id=601ca7b8-4cf5-4053-8597-f5c2b7572659
2025-10-01T08:15:51.1021677Z ##[debug]ram=undefined
2025-10-01T08:15:51.1022150Z ##[debug]threads=undefined
2025-10-01T08:15:51.1022538Z ##[debug]querysuite=undefined
2025-10-01T08:15:51.1022986Z ##[debug]OneESPT=undefined
2025-10-01T08:15:51.1026913Z ##[debug]WaitForProcessing=false
2025-10-01T08:15:51.1029119Z ##[debug]WaitForProcessingInterval=5
2025-10-01T08:15:51.1031355Z ##[debug]WaitForProcessingTimeout=120
2025-10-01T08:15:51.1037729Z Starting database finalization.
2025-10-01T08:15:51.1038070Z Database finalization is a time consuming process and may take a while to complete.
2025-10-01T08:15:51.1066065Z ##[group]Extracting javascript
2025-10-01T08:15:51.1070215Z ##[debug]which '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:15:51.1072974Z ##[debug]found: '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:15:51.1077850Z [command]/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql resolve extractor --format=json --language=javascript
2025-10-01T08:15:51.8707483Z "/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/javascript"
2025-10-01T08:15:51.8808111Z
2025-10-01T08:15:51.8820306Z ##[debug]which '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:15:51.8820961Z ##[debug]found: '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:15:51.8821551Z [command]/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql database trace-command --no-internal-use-lua-tracing /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d/javascript -- /opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/javascript/tools/autobuild.sh
2025-10-01T08:15:52.5822520Z Running command in /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s: [/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/javascript/tools/autobuild.sh]
2025-10-01T08:15:52.7917076Z [2025-10-01 08:15:52] [build-stdout] Single-threaded extraction.
2025-10-01T08:15:54.4191740Z [2025-10-01 08:15:54] [build-stdout] Feature Wave 01/Enate.Core.UI.Legacy/projects/data-access-layer/package.json: Main file not found
2025-10-01T08:15:54.4194824Z [2025-10-01 08:15:54] [build-stdout] Feature Wave 01/Enate.Core.UI.Legacy/projects/shared/package.json: Main file not found
2025-10-01T08:15:54.4195257Z [2025-10-01 08:15:54] [build-stdout] Feature Wave 01/Enate.Core.UI.Legacy/package.json: Main file not found
2025-10-01T08:15:54.4200688Z [2025-10-01 08:15:54] [build-stdout] Extracting /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/Feature Wave 01/Enate.Core.UI.Legacy/projects/WorkManager/src/app/master/pages/display-packet/packet-cards/packet-card-status/status-change/action-status-change/action-status-change.component.html
2025-10-01T08:15:54.5919311Z [2025-10-01 08:15:54] [build-stdout] Done extracting /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/Feature Wave 01/Enate.Core.UI.Legacy/projects/WorkManager/src/app/master/pages/display-packet/packet-cards/packet-card-status/status-change/action-status-change/action-status-change.component.html (169 ms)
2025-10-01T08:15:54.5954316Z [2025-10-01 08:15:54] [build-stdout] Extracting /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/Feature Wave 01/Enate.Core.UI.Legacy/projects/WorkManager/src/app/master/pages/display-packet/packet-cards/packet-card-status/status-change/case-status-change/case-status-change.component.html
2025-10-01T08:15:54.6194512Z [2025-10-01 08:15:54] [build-stdout] Done extracting /mnt/storage/sdc/Build/FeatureWave01/Angular/1/s/Feature Wave 01/Enate.Core.UI.Legacy/projects/WorkManager/src/app/master/pages/display-packet/packet-cards/packet-card-status/status-change/case-status-change/case-status-change.component.html (23 ms)
…...
2025-10-01T08:16:22.6107964Z
2025-10-01T08:16:22.6110978Z ##[endgroup]
2025-10-01T08:16:22.6120112Z ##[group]Finalizing javascript
2025-10-01T08:16:22.6122173Z ##[debug]which '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:16:22.6122702Z ##[debug]found: '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:16:22.6123254Z [command]/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql database finalize --finalize-dataset --threads=0 --ram=26120 /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d/javascript
2025-10-01T08:16:23.2789757Z Running TRAP import for CodeQL database at /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d/javascript...
2025-10-01T08:16:23.9648178Z Importing TRAP files
2025-10-01T08:16:25.9506317Z ##[debug]Agent environment resources - Disk: / Available 17851.43 MB out of 73325.30 MB, Memory: Used 1718.00 MB out of 32097.00 MB, CPU: Usage 79.38%
2025-10-01T08:16:29.4607117Z Merging relations
2025-10-01T08:16:30.9500033Z ##[debug]Agent environment resources - Disk: / Available 17851.36 MB out of 73325.30 MB, Memory: Used 3085.00 MB out of 32097.00 MB, CPU: Usage 79.38%
2025-10-01T08:16:30.9801861Z Finished writing database (relations: 48.58 MiB; string pool: 14.03 MiB).
2025-10-01T08:16:31.0130719Z TRAP import complete (7.7s).
2025-10-01T08:16:31.5910214Z Finished zipping source archive (2.42 MiB).
2025-10-01T08:16:31.6116819Z
2025-10-01T08:16:31.6120607Z ##[endgroup]
2025-10-01T08:16:31.6120835Z Starting query analysis.
2025-10-01T08:16:31.6124506Z ##[group]Running builtin query pack javascript-security-extended.qls for javascript
2025-10-01T08:16:31.6129806Z ##[warning] The query suite defined through pipeline variable or input task is overwritten by the provided config file.
2025-10-01T08:16:31.6130839Z ##[debug]Processed: ##vso[task.logissue type=warning] The query suite defined through pipeline variable or input task is overwritten by the provided config file.
2025-10-01T08:16:31.6131672Z ##[debug]which '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:16:31.6132272Z ##[debug]found: '/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql'
2025-10-01T08:16:31.6133469Z [command]/opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/codeql database analyze --min-disk-free=1024 --output=/mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/out/440.64279.Build_Angular_UI.b365f1.javascript.builtin.sarif --format=sarifv2.1.0 --sarif-add-query-help --sarif-group-rules-by-pack --sarif-multicause-markdown --print-diagnostics-summary --print-metrics-summary --threads=0 --ram=26120 /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d/javascript
2025-10-01T08:16:32.2548484Z Running queries.
2025-10-01T08:16:34.9435382Z [1/202] Loaded /opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/qlpacks/codeql/javascript-queries/2.1.0/Security/CWE-020/IncorrectSuffixCheck.qlx.
…...
2025-10-01T08:16:38.7688901Z Starting evaluation of codeql/javascript-queries/AngularJS/DisablingSce.ql.
…..
2025-10-01T08:17:09.7123607Z Shutting down query evaluator.
2025-10-01T08:17:10.0782480Z Interpreting results.
2025-10-01T08:17:10.3804833Z ##[debug]Agent environment resources - Disk: / Available 17851.20 MB out of 73325.30 MB, Memory: Used 13059.00 MB out of 32097.00 MB, CPU: Usage 20.80%
2025-10-01T08:17:10.9459368Z Resolving extensions
2025-10-01T08:17:11.2392839Z The --sarif-add-query-help flag is deprecated. Use --sarif-include-query-help option instead.
2025-10-01T08:17:11.2402592Z Interpreting /opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/qlpacks/codeql/javascript-queries/2.1.0/Security/CWE-312/CleartextLogging.ql...
2025-10-01T08:17:11.2878083Z Interpreting /opt/hostedtoolcache/CodeQL/2.23.1/x64/codeql/qlpacks/codeql/javascript-queries/2.1.0/Security/CWE-312/CleartextStorage.ql...
……..
2025-10-01T08:17:12.0823426Z Reading source archive /mnt/storage/sdc/Build/FeatureWave01/Angular/_temp/advancedsecurity.codeql/d/javascript/src.zip
2025-10-01T08:17:12.6204686Z CodeQL scanned 697 out of 697 JavaScript/TypeScript files in this invocation. Typically CodeQL is configured to analyze a single CodeQL language per invocation, so check other invocations to determine overall coverage information.
2025-10-01T08:17:12.6209154Z Exporting results to SARIF v2.1.0...
2025-10-01T08:17:12.8397841Z Exported results to SARIF v2.1.0 (219ms).
2025-10-01T08:17:12.8700996Z
2025-10-01T08:17:12.8704908Z analyze_builtin_queries_javascript_duration_ms = 41258
2025-10-01T08:17:12.8705100Z ##[endgroup]
2025-10-01T08:17:12.8707624Z ##[debug]Build.SourcesDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:17:12.8719767Z ##[debug]Build.SourcesDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:17:12.8720151Z Combining all SARIF files into one SARIF file
2025-10-01T08:17:12.8880680Z Ensuring Advanced Security SARIF requirements
2025-10-01T08:17:12.8881016Z Adding VersionControlProvenance to the SARIF file
2025-10-01T08:17:12.8882041Z ##[debug]Build.SourcesDirectory=/mnt/storage/sdc/Build/FeatureWave01/Angular/1/s
2025-10-01T08:17:12.8885214Z Adding automation details id and run Properties to the SARIF file
2025-10-01T08:17:12.8890938Z Submitting results to the AdvancedSecurity service.
2025-10-01T08:17:12.9214218Z ##[debug]SYSTEMVSSCONNECTION auth param ACCESSTOKEN = ***
2025-10-01T08:17:13.0799129Z ##[debug]SYSTEMVSSCONNECTION auth param ACCESSTOKEN = ***
2025-10-01T08:17:13.6679523Z Submission completed successfully.
2025-10-01T08:17:13.6680488Z The submission receipt from Advanced Security is 23689
2025-10-01T08:17:13.6685836Z Go to https://dev.azure.com/enate/Enate/_git/Core%20-%20Feature%20Waves/alerts?_t=codescanning to view alerts in Advanced Security.
2025-10-01T08:17:13.6686626Z ##[debug]set advancedsecurity.codeql.results.published=true
2025-10-01T08:17:13.6687573Z ##[debug]Processed: ##vso[task.setvariable variable=advancedsecurity.codeql.results.published;isOutput=false;issecret=false;]true
2025-10-01T08:17:13.6687920Z
2025-10-01T08:17:13.6688570Z ====================================================================================================
2025-10-01T08:17:13.6688861Z Analyzing CodeQL execution results.
2025-10-01T08:17:13.6691360Z The Analyze task succeeded without any issues.
2025-10-01T08:17:13.6691935Z ====================================================================================================
2025-10-01T08:17:13.6692167Z
2025-10-01T08:17:13.6692428Z Learn more about the scan for the CodeQL build tasks:
2025-10-01T08:17:13.6692756Z https://aka.ms/advanced-security/code-scanning/detection
2025-10-01T08:17:13.6692885Z
2025-10-01T08:17:13.6694019Z
2025-10-01T08:17:13.7055187Z ##[debug]Processed: ##vso[telemetry.publish area=AdvancedSecurity;feature=AdvancedSecurity-Codeql-Analyze;]{"taskName":"AdvancedSecurity-Codeql-Analyze","startTime":"2025-10-01T08:15:51.098Z","sessionId":"601ca7b8-4cf5-4053-8597-f5c2b7572659","languages":["javascript"],"buildDefinitionIdentifier":"4409bc19-49e4-474c-a415-52c0096da553:440","buildIdentifier":"4409bc19-49e4-474c-a415-52c0096da553:64279","debug":false,"hasPathsToInclude":false,"hasPathsToIgnore":false,"addSnippetsToResults":false,"debugUploadAll":false,"debugUploadSarif":false,"logLevel":0,"autobuildAllLanguages":false,"querySuite":"security-extended","isConfigFileProvided":true,"isBuildlessEnabled":false,"buildRepositoryUri":"https://enate.visualstudio.com/Enate/_git/Core%20-%20Feature%20Waves","gitRemoteUrls":{"origin":"https://enate.visualstudio.com/Enate/_git/Core%20-%20Feature%20Waves"},"workingDirectoryIsGit":true,"codeqlVersion":"CodeQL/2.23.1/x64","results":[{"language":"javascript","count":31}],"advancedSecurity":{"attempted":true,"numAttempts":1,"statusCode":200,"statusText":"OK","sarifId":23689,"sarif":{"sarifFileSize":1923693,"gzipFileSzie":174559},"submissionUrl":"https://enate.advsec.visualstudio.com/Enate/_apis/Alert/repositories/Core - Feature Waves/sarifs"},"success":true,"endTime":"2025-10-01T08:17:13.669Z","totalSeconds":82.571}
2025-10-01T08:17:13.7057754Z ##[section]Finishing: Advanced Security Code Analysis
Repro steps
- task: AdvancedSecurity-Codeql-Init@1
displayName: 'Advanced Security Initialization'
inputs:
languages: 'javascript'
configfilepath: '$(build.sourcesDirectory)/build/CodeQL/configFile.yml'
.....
- task: AdvancedSecurity-Codeql-Analyze@1
displayName: 'Advanced Security Code Analysis'