khulnasoft-lab/codeql-migrator

Automate the migration of CodeQL Action from v2 to v3 across repositories.

has deprecated CodeQL Action v2, and workflows using it may eventually break. This tool:

• Finds repositories still using CodeQL v2.
• Automatically updates workflows to CodeQL v3.
• Creates pull requests to suggest upgrades.

✅ Scans repositories for CodeQL v2 usage.
✅ Updates workflow files to use CodeQL v3.
✅ Creates pull requests with upgrade suggestions.
✅ Works on public and private repositories.
✅ Can be run manually or as a Action.

git clone https://.com/YOUR-USERNAME/codeql-migrator.git
cd codeql-migrator

python3 -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate
pip install -r requirements.txt

Create a Personal Access Token (PAT) with repo and workflow permissions.
Set it as an environment variable:

export _TOKEN="your_personal_access_token"

python migrator.py

You can schedule automated runs with Actions.
Create ./workflows/run-migrator.yml:

name: Run CodeQL Migrator
on:
  schedule:
    - cron: '0 0 * * 1'  # Runs every Monday
  workflow_dis:  # Allows manual triggering
jobs:
  run-script:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v3

      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.x'

      - name: Install Dependencies
        run: pip install requests pyyaml 3.py

      - name: Run Migration Script
        env:
          _TOKEN: ${{ secrets._TOKEN }}
        run: python migrator.py

Add this workflow to your repository to automatically migrate CodeQL from v2 to v3:

:/./workflows/codeql-migration.yml name: CodeQL Migration on: schedule: - cron: '0 0 * * 1' # Runs every Monday workflow_dis:

jobs: migrate: runs-on: ubuntu-latest permissions: contents: write pull-requests: write steps: - uses: khulnasoft-lab/codeql-migrator@v1 with: -token: ${{ secrets._TOKEN }}

1️⃣ Finds repos using CodeQL v2 via API.
2️⃣ Clones the repo and checks workflow files.
3️⃣ Replaces uses: /codeql-action/*@v2 with @v3.
4️⃣ Commits changes & creates a pull request.

• The script does not store credentials.
• Uses API rate-limits apply.
• Verify pull requests before merging.

• Add CLI options for manual repo input.
• Improve logging and error handling.
• Turn into a App for automatic suggestions.

PRs are welcome! Follow the standard workflow:

1. Fork the repository.
2. Create a feature branch (git checkout -b feature-name).
3. Commit changes (git commit -m "Add new feature").
4. Push to your branch (git push origin feature-name).
5. Open a pull request.

Licensed under the MIT License.

If this project helps you, give it a ⭐ on !

The tool is available as a Docker image from Container Registry:

docker pull ghcr.io/khulnasoft-lab/codeql-migrator:latest

Run it with your token:

docker run -e _TOKEN="your_token" ghcr.io/khulnasoft-lab/codeql-migrator:latest

You can also use it with additional parameters:

docker run -e _TOKEN="your_token" ghcr.io/khulnasoft-lab/codeql-migrator:latest \
  --per-page 20 \
  --dry-run \
  --branch-name custom-branch

🔥 Automate your CodeQL upgrades today! 🔥