Giters

github / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Home Page:https://codeql.github.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CodeQL being very slow when passed --command parameter

amir734jj opened this issue · comments

commented

I am trying to run CodeQL on ServiceFabric codebase and its being very slow when I pass --command. My understanding is when we pass --command CodQL invokes this command at the source code directory and analyzes the output. Running sfbuild -release takes 2 hours and running it as part of CodeQL took ~48 hours. I am wondering why it's being slow? is there a way to run "sfbuild -release" separately and then pass the output to CodeQL afterwards? thank you.

codeql database create --language=cpp --source-root=C:\WindowsFabric testcodeqldb --command="sfbuild -release"
commented

Hi @amir734jj,

48 hrs is excessive. We generally expect around a 4x slowdown (so around 8hrs in your case), so there's clearly some issue somewhere and we would need to see the log files at the very least. It's not possible to run "sfbuild -release" separately and then pass the output to CodeQL.

Since you seem to be working for Microsoft, can you please escalate this through internal channels. That will make it easier to share logs and hopefully diagnose the problem.