Visual Studio CodeQL Extension - Downloading database from GitHub

[snc-howell-test]

Hello, I am running the following:

VS Code Version: 1.91.1 (Universal) on MacOS
CodeQL VS Code Extension: v1.13.1
CodeQL CLI: 2.17.0

I am part of a GitHub Enterprise Account with a GitHub Advanced Security seats. We have configured CodeQL for our repositories. I see findings populating in the "Security" -> "Code scanning" page of the repos "Security Overview". I would like to download CodeQL databases from our enterprise repo. Downloading a publicly available repo such as apache kafka works as expected:

However, when I attempt to download a database from my enterprise repo I receive an error that it does not exists

This response leads me to believe I'm missing credentials somewhere. The "Account" section in the bottom right empty and does not give me an option to sign in to github when I have the codeQL extension selected. Other extensions such as the GitHub Actions and GitHub Codespaces allow me to sign in. Even after signing into github through the Codespaces extension, the database download for my enterprise repo fails. When I am signed in, I can view trusted extensions. Should I. expect to see the CodeQL extension here as well?

Thank you all for your help!

[mbg]

Hi @snc-howell-test 👋🏻

Thanks for the questions!

This response leads me to believe I'm missing credentials somewhere

In the command palette, there is an option for "CodeQL: Authenticate to GitHub". Have you tried this and logged in with the right account there?

When I am signed in, I can view trusted extensions. Should I. expect to see the CodeQL extension here as well?

I believe that this isn't about access to credentials, but rather whether extensions are run when you open a workspace and choose the "I do not trust the authors of this project" option.

[snc-howell-test]

@mbg Thank you for your response. I do not see an option for "CodeQL: Authenticate to GitHub" in the command palette.

Extension trust with VS Code may be managed by our organization. I will follow up with the IT department.

[mbg]

Sorry about that. It seems like that option isn't generally available.

There is a setting where you can specify a custom GitHub Enterprise Server URI:

Or, alternatively, this corresponds to the "github-enterprise.uri": "" setting in the JSON configuration.