Moves calls to pack download to the init action

This ensures all steps to gather queries happens in the init action.
This is where checking out queries in other repos happens as well.

Author: aeisenberg

lib/analyze.js

@@ -280,21 +280,6 @@ export async function runQueries(
         logger.endGroup();
         logger.info(analysisSummary);
       } else {
-        if (hasPackWithCustomQueries) {
-          logger.info("Performing analysis with custom CodeQL Packs.");
-          logger.startGroup(`Downloading custom packs for ${language}`);
-
-          const results = await codeql.packDownload(packsWithVersion);
-
-          logger.info(
-            `Downloaded packs: ${results.packs
-              .map((r) => `${r.name}@${r.version || "latest"}`)
-              .join(", ")}`
-          );
-
-          logger.endGroup();
-        }
-
         logger.startGroup(`Running queries for ${language}`);
         const querySuitePaths: string[] = [];
         if (queries["builtin"].length > 0) {

lib/analyze.js.map

@@ -953,6 +953,24 @@ async function addQueriesAndPacksFromWorkflow(
     );
     injectedMlQueries = injectedMlQueries || didInject;
   }
+
+  if (packs) {
+    for (const [language, packsWithVersion] of Object.entries(packs)) {
+      if (packsWithVersion?.length) {
+        logger.startGroup(`Downloading custom packs for ${language}`);
+        const results = await codeQL.packDownload(packsWithVersion);
+
+        logger.info(
+          `Downloaded packs: ${results.packs
+            .map((r) => `${r.name}@${r.version || "latest"}`)
+            .join(", ")}`
+        );
+
+        logger.endGroup();
+      }
+    }
+  }
+
   return injectedMlQueries;
 }