[WIP] Fix failing GitHub Actions job Validate test results (#192)

* Initial plan

* Fix validate-test-results and configs CI job failures

- Validate test results: use jq --slurp flag so all test report files
  are combined into a single array before selecting failing tests.
  Without --slurp, jq processes files independently and can produce
  a parse error when encountering empty/non-JSON slice output files.

- Configs: add 'Install Packs' step before 'Check Configurations' to
  run codeql pack install for each language src directory. This ensures
  upstream packs (e.g. codeql/cpp-queries) are available in
  ~/.codeql/packages when codeql database create resolves transitive
  dependencies from the githubsecuritylab community packs.

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>

* ci: add packages: read permission to configs job for GHCR rate limiting

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -152,7 +152,7 @@ jobs:
           do
             jq --raw-output '"PASS \(map(select(.pass == true)) | length)/\(length)"' "$json_report"
           done
-          FAILING_TESTS=$(jq --raw-output '.[] | select(.pass == false)' "${test_reports[@]}")
+          FAILING_TESTS=$(jq --slurp --raw-output '.[][] | select(.pass == false)' "${test_reports[@]}")
           if [[ ! -z "$FAILING_TESTS" ]]; then
             echo "ERROR: The following tests failed:"
             echo $FAILING_TESTS | jq .
@@ -236,6 +236,7 @@ jobs:
     needs: compile-and-test
     permissions:
       contents: read
+      packages: read # required by codeql pack install (GHCR rate limiting)
       pull-requests: read # required by pr-configs.sh (gh pr view)
 
     steps:
@@ -252,6 +253,17 @@ jobs:
         if: steps.changes.outputs.src == 'true' || github.event_name == 'workflow_dispatch'
         uses: ./.github/actions/install-codeql
 
+      - name: Install Packs
+        if: steps.changes.outputs.src == 'true' || github.event_name == 'workflow_dispatch'
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          for lang in cpp csharp go java javascript python ruby; do
+            if [[ -d "${lang}/src" ]]; then
+              codeql pack install "${lang}/src"
+            fi
+          done
+
       - name: "Check Configurations"
         if: steps.changes.outputs.src == 'true' || github.event_name == 'workflow_dispatch'
         env: