Skip to content

Give CodeQL a full clone so Nerdbank.GitVersioning can version the build - #51

Merged
davidnmbond merged 1 commit into
mainfrom
fix/codeql-full-clone
Oct 3, 2026
Merged

davidnmbond merged 1 commit into
mainfrom
fix/codeql-full-clone

Conversation

@davidnmbond

Copy link
Copy Markdown
Contributor

Cause

The CodeQL Analyze (csharp) job fails on main and on pull requests. actions/checkout defaults to a shallow clone (fetch-depth: 1), so Nerdbank.GitVersioning cannot compute the version height and autobuild stops with:

Shallow clone lacks the objects required to calculate version height

Fix

Set fetch-depth: 0 on the checkout step of the CodeQL workflow so the job gets full history. This is the same one-line change proven on panoramicdata/HubSpot.Api#8.

Tracked under OPS-157454.

🤖 Generated with Claude Code

…rsion the build

CodeQL's autobuild failed on every run because the default shallow checkout
lacks the history Nerdbank.GitVersioning needs to compute the version height.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

The required configuration fetch-depth: 0 for the actions/checkout step is missing from the .github/workflows/codeql.yml file. This implementation gap prevents the PR from achieving its objective of enabling accurate version calculation via Nerdbank.GitVersioning. Although the project remains up to Codacy quality standards, this functional omission should be addressed before merging.

Test suggestions

  • Verify that the actions/checkout step in codeql.yml includes fetch-depth: 0
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that the actions/checkout step in codeql.yml includes fetch-depth: 0

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

@davidnmbond
davidnmbond merged commit 92be6ce into main Oct 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants