Branch: refs/heads/master Author: Enrico Tröger enrico.troeger@uvena.de Committer: GitHub noreply@github.com Date: Sun, 17 Mar 2024 14:11:40 UTC Commit: dcefe723a79f24107dcb08bbc63b1ef4581f2849 https://github.com/geany/geany/commit/dcefe723a79f24107dcb08bbc63b1ef4581f28...
Log Message: ----------- Merge pull request #3769 from andy5995/ci-add-codeql
CI: Add CodeQL Analysis workflow
Modified Paths: -------------- .github/workflows/build.yml .github/workflows/codeql.yml
Modified: .github/workflows/build.yml 2 lines changed, 1 insertions(+), 1 deletions(-) =================================================================== @@ -15,7 +15,7 @@ on:
# cancel already running builds of the same branch or pull request concurrency: - group: ci-${{ github.head_ref }} || concat(${{ github.ref }} + group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }} cancel-in-progress: true
env:
Modified: .github/workflows/codeql.yml 80 lines changed, 80 insertions(+), 0 deletions(-) =================================================================== @@ -0,0 +1,80 @@ +name: "CodeQL" + +on: + workflow_dispatch: + push: + branches: [ "master" ] + paths: + - '**.c' + - '**.cpp' + - '**.h' + - '**.hpp' + - '**.py' + - '!**.yml' + - '**/codeql.yml' + pull_request: + branches: [ "master" ] + paths: + - '**.c' + - '**.cpp' + - '**.h' + - '**.hpp' + - '**.py' + - '!**.yml' + - '**/codeql.yml' + schedule: + - cron: '15 20 15 * *' + + +concurrency: + group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }} + cancel-in-progress: true + +jobs: + analyze: + name: Analyze + runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} + timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }} + permissions: + # required for all workflows + security-events: write + + # only required for workflows in private repositories + actions: read + contents: read + + strategy: + fail-fast: false + matrix: + language: [ 'c-cpp', 'python' ] + # CodeQL supports [ 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift' ] + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + + - name: Install dependencies + run: | + sudo apt-get update -qq + sudo apt-get install --assume-yes --no-install-recommends \ + ccache \ + gettext autopoint \ + libtool \ + libgtk-3-dev \ + doxygen \ + python3-docutils \ + python3-lxml \ + rst2pdf + + - name: Autobuild + uses: github/codeql-action/autobuild@v3 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{matrix.language}}"
-------------- This E-Mail was brought to you by github_commit_mail.py (Source: https://github.com/geany/infrastructure).