Which of the MS Learn modules from the dropdown are you submitting an update request?
Identify security vulnerabilities in your codebase with CodeQL
Additional information
Information about the requested update
I completed the CodeQL default-setup steps multiple times in the skills-introduction-to-codeql training repository. The exercise requires a CodeQL alert from Python code, but the default configuration detects and scans only GitHub Actions.
Expected behavior
• CodeQL default setup should detect the repository’s Python files.
• The Actions run should show both Analyze (actions) and Analyze (python).
• The SQL-injection training change should generate the CodeQL alert required by the next exercise step.
Actual behavior
• CodeQL default configuration lists only GitHub Actions.
• The PR check shows only CodeQL / Analyze (actions) (dynamic).
• Code scanning reports 0 Open alerts and “No new alerts in code changed by this pull request.”
• The required Analyze (python) job never appears, so the exercise cannot advance to the review-comments/alert step.
The repository contains Python files under the server directory, but CodeQL default setup does not detect Python. Default setup does not provide a way to manually add Python; switching to advanced setup changes the training state and is not what the exercise instructions require.
Which of the MS Learn modules from the dropdown are you submitting an update request?
Identify security vulnerabilities in your codebase with CodeQL
Additional information
Information about the requested update
I completed the CodeQL default-setup steps multiple times in the skills-introduction-to-codeql training repository. The exercise requires a CodeQL alert from Python code, but the default configuration detects and scans only GitHub Actions.
Expected behavior
• CodeQL default setup should detect the repository’s Python files.
• The Actions run should show both Analyze (actions) and Analyze (python).
• The SQL-injection training change should generate the CodeQL alert required by the next exercise step.
Actual behavior
• CodeQL default configuration lists only GitHub Actions.
• The PR check shows only CodeQL / Analyze (actions) (dynamic).
• Code scanning reports 0 Open alerts and “No new alerts in code changed by this pull request.”
• The required Analyze (python) job never appears, so the exercise cannot advance to the review-comments/alert step.
The repository contains Python files under the server directory, but CodeQL default setup does not detect Python. Default setup does not provide a way to manually add Python; switching to advanced setup changes the training state and is not what the exercise instructions require.