Merge branch 'main' into patch-1

Author: VibhuRajput

content/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-codeql-code-scanning-in-your-ci-system.md

@@ -147,6 +147,9 @@ Analyzes the code in the {% data variables.product.prodname_codeql %} databases
 | <nobr>`--checkout-path`</nobr> | | The path to the checkout of your repository. The default is the current working directory.  |
 | `--no-upload` | | None. Stops the {% data variables.product.prodname_codeql_runner %} from uploading the results to {% data variables.product.product_location %}. |
 | `--output-dir` | | Directory where the output SARIF files are stored. The default is in the directory of temporary files. |
+| `--ram` | | Amount of memory to use when running queries. The default is to use all available memory. |
+| `--no-add-snippets` | | None. Includes code snippets in the SARIF output. |
+| `--threads` | | Number of threads to use when running queries. The default is to use all available cores. |
 | `--temp-dir` | | Directory where temporary files are stored. The default is _./codeql-runner_. |
 | `--debug` | | None. Prints more verbose output. |
 | `-h`, `--help` | | None. Displays help for the command. |

middleware/set-fastly-cache-headers.js

@@ -1,7 +1,19 @@
 const FASTLY_TTL = process.env.FASTLY_TTL || String(60 * 60 * 24) // 24 hours
 const STALE_TTL = String(60 * 10) // 10 minutes
 
+const BYPASS_FASTLY = process.env.TEST_BYPASS_FASTLY === 'true'
+const BYPASS_PRODUCTS = /^\/([a-z]{2})\/([a-z0-9._-]+@[a-z0-9._-]+\/)?(discussions|packages|actions)(\/.*|$)/i
+
 module.exports = (req, res, next) => {
+  // Test bypassing Fastly for all pages inside of the Discussions product
+  if (BYPASS_FASTLY && BYPASS_PRODUCTS.test(req.originalUrl)) {
+    res.set({
+      'surrogate-control': 'private, no-store',
+      'cache-control': 'private, no-store'
+    })
+    return next()
+  }
+
   res.set({
 
     // Say you want Fastly to cache your content but you don't want it cached by browsers.