Codeql is giving warning: Invalid Go toolchain version
friedrichg opened this issue · comments
Friedrich Gonzalez commented
Describe the bug
CodeQl is refusing to analyse the cortex code
To Reproduce
Steps to reproduce the behavior:
https://github.com/cortexproject/cortex/security/code-scanning/tools/CodeQL/status/configurations/actions-FZTWS5DIOVRC653POJVWM3DPO5ZS65DFON2C2YTVNFWGILLEMVYGY33ZFZ4W23A/42065a090d6e5bc992b82fafa11d0bd003344f9e8baec9c2f02bffa068a55410
As of Go 1.21, toolchain versions [must use the 1.N.P syntax](https://go.dev/doc/toolchain#version).
1.21 in go.mod does not match this syntax and there is no additional toolchain directive, which may cause some go commands to fail.
Expected behavior
it should not fail or give warnings