codeql-abom v2.27.2

Built against CodeQL CLI 2.27.2; install that CLI separately.

Verify an archive before unpacking it:

gh attestation verify codeql-abom_2.27.2_linux_amd64.tar.gz --repo advanced-security/codeql-abom
shasum -a 256 --check --ignore-missing SHA256SUMS

It needs Graphviz on the PATH: serve refuses to start without dot.

This release finds its packs and interface only when started from the extracted directory:

cd codeql-abom_2.27.2_linux_amd64
find ql -name codeql-pack.yml -exec sh -c 'codeql pack install "$(dirname "$1")"' _ {} \;
./codeql-abom serve --db "$HOME/.abom/abom.db" --ui-dir ui --addr 127.0.0.1:8099

What's Changed

• fix(ci): fix workflow run failures for initial setup of codeql-abom repo by @data-douser with @Copilot in #1
• init(abom): Jumbo PR for extended project init by @data-douser in #3
• feature(abom): unified and simplified UI by @data-douser in #4
• Plan SPIKES for unified CodeQL database by @data-douser in #6
• chore(abom): fixes for Code Scanning and Code Quality by @data-douser in #5
• Fix dependency installations and cache warming in setup by @data-douser in #9
• Enable Copilot Knowledge Base by @data-douser in #8
• Spike: uses: resolves across repositories only for bare owner/repo checkouts — narrow account-database, semantic-model, and reachability-crosscheck accordingly by @data-douser with @Copilot in #10
• Disable Copilot Knowledge Base by @data-douser in #11
• feat(abom): complete edge facts and gate CI on a populated data set by @data-douser in #21
• [WIP] Implement approach to fetch and retain each repository commit by @data-douser with @Copilot in #22
• feat(abom): Lock-aware resolution, two coverage queries, and the annotated-tag fix it found by @data-douser in #31
• feat(abom): Record analysis mode on query runs and enforce it through reads, filters and the interface by @data-douser with @Copilot in #30
• feat(abom): One filter control served from the language, and an Explorer you enter on purpose by @data-douser in #35
• feat(QLaaS): QL-as-a-Service : Phase 1 implementation by @data-douser in #37
• feat(abom): QLaaS : Phase 2 by @data-douser in #38
• feat(abom): QLaaS : Phase 3 by @data-douser in #39
• chore(abom): cleanup & other refactor for code quality by @data-douser in #40
• wip(abom): per-repo BOM by @data-douser in #41
• feat(deploy): Onboarding docs, unavailable-work retry, gated releases by @data-douser in #43
• feat(abom): Make findings reviewable from Inventory UI by @data-douser in #42
• chore(abom): Improve release workflows with lessons learned from v2.27.1-rc1 by @data-douser in #44
• feat(abom): CodeQL closure DBs + Actions expand and drill-down details by @data-douser in #45
• feat(abom): GitHub App support w/ commit-aware change ingestion & stable graph visualizations in details UI by @data-douser in #46
• feat(QLaaS): Demo Checkpoint by @data-douser in #47
• chore(abom): Refactor for Code Quality by @data-douser in #48
• Add a PostgreSQL store backend alongside SQLite by @data-douser in #49
• fix(explorer): keep container images outside account groups by @data-douser in #50
• chore(ci): mirror ql-mcp's CodeQL upgrade pipeline by @data-douser in #52
• fix(ci): give the CodeQL upgrade job the toolchain make verify needs by @data-douser in #53
• fix(security): harden HTTP boundaries and query deployment by @data-douser in #51
• Upgrade CodeQL CLI to v2.27.2 by @github-actions[bot] in #54
• feat(abom): initial implementation of Tutorial and Demo modes by @data-douser in #55
• ci(go): run store backends as parallel jobs and shard the PostgreSQL suite by @data-douser in #56
• chore(release-prep): default Codespace is demo mode, plus other prep for initial public release by @data-douser in #57
• fix(release): install Graphviz where release jobs start serve by @data-douser in #59
• feat(abom): implement QLaaS session audit log by @data-douser in #58
• fix(release): standardize on ubuntu-26.04 and share Go test job by @data-douser in #60
• chore(release-prep): cleanup links in test fixtures & enforce CodeQL eligibility checks by @data-douser in #61

New Contributors

• @github-actions[bot] made their first contribution in #54

Full Changelog: https://github.com/advanced-security/codeql-abom/commits/v2.27.2