KofTwentyTwo/kof22-post
2
0 Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

CodeQL Swift analysis fails on the Xcode 27 runner image #1

New Issue
Open
opened 2026-10-12 13:15:14 +00:00 by KofTwentyTwo · 0 comments
KofTwentyTwo commented 2026-10-12 13:15:14 +00:00 (Migrated from github.com)
Copy link
Copy source

CodeQL's Swift extraction cannot build the app on GitHub's xcode-27 preview runner image (CodeQL bundle 2.27.1, codeql-action v4.38.3 via the standards reusable workflow).

  • SwiftPM manifest compilation under the tracer failed with posix_spawn error: Bad CPU type in executable (86) when spawning sandbox-exec; worked around with make build-codeql (manifest and plugin sandboxes disabled).
  • Compiler macro plugins then fail to load under the tracer: external macro implementation type 'SwiftUIMacros.EntryMacro' could not be found for macro 'Entry()' (run 38252022101). The app uses SwiftUI and SwiftData macros, so the build cannot complete under tracing.

Until CodeQL or the image supports this, codeql.yml analyzes only actions. Compensating controls: SwiftLint --strict, warnings as errors, 100% line coverage on KoF22Kit, gitleaks, Trivy/OSV. Recorded in docs/standards-conformance.md (K22-CI-22).

To close: re-add swift to languages in .github/workflows/codeql.yml when a newer CodeQL bundle or the GA Xcode 27 image builds successfully.

CodeQL's Swift extraction cannot build the app on GitHub's `xcode-27` preview runner image (CodeQL bundle 2.27.1, codeql-action v4.38.3 via the standards reusable workflow). - SwiftPM manifest compilation under the tracer failed with `posix_spawn error: Bad CPU type in executable (86)` when spawning `sandbox-exec`; worked around with `make build-codeql` (manifest and plugin sandboxes disabled). - Compiler macro plugins then fail to load under the tracer: `external macro implementation type 'SwiftUIMacros.EntryMacro' could not be found for macro 'Entry()'` (run 38252022101). The app uses SwiftUI and SwiftData macros, so the build cannot complete under tracing. Until CodeQL or the image supports this, `codeql.yml` analyzes only `actions`. Compensating controls: SwiftLint `--strict`, warnings as errors, 100% line coverage on KoF22Kit, gitleaks, Trivy/OSV. Recorded in `docs/standards-conformance.md` (K22-CI-22). To close: re-add `swift` to `languages` in `.github/workflows/codeql.yml` when a newer CodeQL bundle or the GA Xcode 27 image builds successfully.
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
accessibility
Barrier affecting people with disabilities
 bug
Something isn't working
 dependencies
Pull requests that update a dependency file
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 question
Further information is requested
 swift_package_manager
Pull requests that update swift_package_manager code
 wontfix
This will not be worked on
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/kof22-post#1