Package Details: codeql 2.27.2-1

Git Clone URL: https://aur.archlinux.org/codeql.git (read-only, click to copy)
Package Base: codeql
Description: CLI tool for GitHub's CodeQL, including the standard query packs
Upstream URL: https://github.com/github/codeql-cli-binaries
Licenses: MIT, zlib, Apache-2.0, BSD-3-Clause, BSD-2-Clause, CC0-1.0, EPL-2.0, OLDAP-2.8, LGPL-2.1-only, PSF-2.0, GPL-2.0-only WITH Classpath-exception-2.0, LicenseRef-Public-Domain, Apache-2.0 WITH LLVM-exception, LicenseRef-GitHub-CodeQL, CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0, EPL-1.0 OR MPL-2.0, LicenseRef-PMD-BSD-Style
Conflicts: codeql-cli-bin
Replaces: codeql-cli-bin
Submitter: sauyon
Maintainer: jonathanio (RubenKelevra)
Last Packager: RubenKelevra
Votes: 6
Popularity: 0.49
First Submitted: 2020-06-09 19:02 (UTC)
Last Updated: 2026-10-08 22:13 (UTC)

Dependencies (8)

Required by (0)

Sources (2)

Latest Comments

1 2 Next › Last »

RubenKelevra commented on 2026-10-08 08:31 (UTC)

I started working on the update to 2.27.2

RubenKelevra commented on 2026-09-22 20:09 (UTC)

I'm working on the update to 2.27.1

RubenKelevra commented on 2026-09-09 16:18 (UTC)

I'm working on the update to 2.27.0.

RubenKelevra commented on 2026-09-08 19:27 (UTC)

@jonathanio have a look if my update works for you as expected. If not lmk :)

RubenKelevra commented on 2026-09-08 09:08 (UTC) (edited on 2026-09-08 09:14 (UTC) by RubenKelevra)

@froub I don't know what you mean. I never claimed to have done 99.9% of the work anywhere.

Less than five hours from comment to removal does seem strange. We’ve seen this pattern before.

Who is we? What kind of removal do you refer to?

froub commented on 2026-09-08 08:34 (UTC) (edited on 2026-09-08 08:55 (UTC) by froub)

@jonathanio, anything still needed here? Happy to remove myself as a maintainer if you wanna fully own this. Let me know :)

@RubenKelvra, The 99.9% comment is a bit strange, as it’s simply not true. I fixed and then adopted this package to keep it up to date when needed. Less than five hours from comment to removal does seem strange. We’ve seen this pattern before.

RubenKelevra commented on 2026-09-07 16:31 (UTC)

@jonathanio, that's nice, thanks a lot! I'll do some finishing touches and then I'll push a pkgrel update :)

jonathanio commented on 2026-09-07 16:25 (UTC)

@RubenKelvra given you've done 99.9% of the work, I've added you as a co-maintainer for the repository so you can build that in directly.

RubenKelevra commented on 2026-09-07 11:18 (UTC) (edited on 2026-09-07 11:20 (UTC) by RubenKelevra)

@jonathanio

Thanks for updating the package. I had already been looking into it in some detail and noticed a few packaging issues that are still present after the version bump:

The package currently uses the bare codeql-linux64.zip from codeql-cli-binaries. Current installation guidance recommends the full CodeQL bundle from github/codeql-action which also contains the matching standard query packs and libraries. Without that, suites such as cpp-code-scanning.qls, cpp-security-extended.qls etc. are missing.

Also i686 should not be listed as a supported package architecture. The distributed CLI is x86_64.

In regards to licensing the bundle has substantially more licensing than just the proprietary CodeQL license. It contains among others MIT, Apache-2.0 and several third-party components/notices that should be reflected in license=() and installed appropriately.

The full bundle also has language-specific optional runtime/toolchain requirements which would fit well into optdepends.

I already have a PKGBUILD prepared against 2.26.3 using the official bundle, with the licenses, dependencies and query-suite checks added. If useful I can send you the diff so you don't have to duplicate the work.

1 2 Next › Last »