Emit warning for unrecognised repo properties with our common prefix

github · mbg · Mar 13, 2026 · Mar 12, 2026 · Mar 13, 2026 · Mar 12, 2026
commit a717db1a90561452d7e70a39717a78814662ab09
@@ -4,7 +4,7 @@ import * as sinon from "sinon";
 import * as api from "../api-client";
 import { getRunnerLogger } from "../logging";
 import { parseRepositoryNwo } from "../repository";
-import { setupTests } from "../testing-utils";
+import { RecordingLogger, setupTests } from "../testing-utils";
 
 import * as properties from "./properties";
 
@@ -197,3 +197,38 @@ test.serial(
     );
   },
 );
+
+test.serial(
+  "loadPropertiesFromApi warns if a repository property name starts with the common prefix, but is not recognised by us",
+  async (t) => {
+    process.env["GITHUB_EVENT_NAME"] = "push";
+    const propertyName: string = `${properties.GITHUB_CODEQL_PROPERTY_PREFIX}unknown`;
+    sinon.stub(api, "getRepositoryProperties").resolves({
+      headers: {},
+      status: 200,
+      url: "",
+      data: [
+        {
+          property_name: propertyName,
+          value: "true",
+        },
+      ] satisfies properties.GitHubPropertiesResponse,
+    });
+    const logger = new RecordingLogger();
+    const warningSpy = sinon.spy(logger, "warning");
+    const mockRepositoryNwo = parseRepositoryNwo("owner/repo");
+    const response = await properties.loadPropertiesFromApi(
+      logger,
+      mockRepositoryNwo,
+    );
+    t.deepEqual(response, {});
+    t.true(warningSpy.calledOnce);
+    t.assert(
+      warningSpy.firstCall.args[0]
+        .toString()
+        .startsWith(
+          `Found a repository property named '${propertyName}', which looks like a CodeQL Action repository property`,
+        ),
+    );
+  },
+);
@@ -1,7 +1,11 @@
+import { isDynamicWorkflow } from "../actions-util";
 import { getRepositoryProperties } from "../api-client";
 import { Logger } from "../logging";
 import { RepositoryNwo } from "../repository";
 
+/** The common prefix that we expect all of our repository properties to have. */
+export const GITHUB_CODEQL_PROPERTY_PREFIX = "github-codeql-";
+
 /**
  * Enumerates repository property names that have some meaning to us.
  */
@@ -123,6 +127,16 @@ export async function loadPropertiesFromApi(
 
       if (isKnownPropertyName(property.property_name)) {
         setProperty(properties, property.property_name, property.value, logger);
+      } else if (
+        property.property_name.startsWith(GITHUB_CODEQL_PROPERTY_PREFIX) &&
+        !isDynamicWorkflow()
+      ) {
+        logger.warning(
+          `Found a repository property named '${property.property_name}', ` +
+            "which looks like a CodeQL Action repository property, " +
+            "but which is not understood by this version of the CodeQL Action. " +
+            "Do you need to update to a newer version?",
+        );
       }
     }