.github/workflows/codeql-analysis.yml (2981B)
1 # For most projects, this workflow file will not need changing; you simply need 2 # to commit it to your repository. 3 # 4 # You may wish to alter this file to override the set of languages analyzed, 5 # or to provide custom queries or build logic. 6 name: "CodeQL" 7 8 on: 9 push: 10 branches: [master] 11 pull_request: 12 # The branches below must be a subset of the branches above 13 branches: [master] 14 schedule: 15 - cron: '0 16 * * 4' 16 17 jobs: 18 analyze: 19 name: Analyze 20 runs-on: ubuntu-latest 21 22 strategy: 23 fail-fast: false 24 # matrix: 25 # Override automatic language detection by changing the below list 26 # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python'] 27 # language: ['cpp'] 28 # Learn more... 29 # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection 30 31 steps: 32 - name: Checkout repository 33 uses: actions/checkout@v2 34 with: 35 # We must fetch at least the immediate parents so that if this is 36 # a pull request then we can checkout the head. 37 fetch-depth: 2 38 39 # If this run was triggered by a pull request event, then checkout 40 # the head of the pull request instead of the merge commit. 41 # CodeQL apparently deprecated this feature and now warns on running this command 42 # - run: git checkout HEAD^2 43 # if: ${{ github.event_name == 'pull_request' }} 44 45 # Initializes the CodeQL tools for scanning. 46 - name: Initialize CodeQL 47 uses: github/codeql-action/init@v1 48 with: 49 languages: ${{ matrix.language }} 50 # If you wish to specify custom queries, you can do so here or in a config file. 51 # By default, queries listed here will override any specified in a config file. 52 # Prefix the list here with "+" to use these queries and those in the config file. 53 # queries: ./path/to/local/query, your-org/your-repo/queries@main 54 55 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). 56 # If this step fails, then you should remove it and run the build manually (see below) 57 #- name: Autobuild 58 # uses: github/codeql-action/autobuild@v1 59 60 # âšī¸ Command-line programs to run using the OS shell. 61 # đ https://git.io/JvXDl 62 63 # âī¸ If the Autobuild fails above, remove it and uncomment the following three lines 64 # and modify them (or add more) to build your code if your project 65 # uses a compiled language 66 67 - run: | 68 sudo apt-get update 69 sudo apt install autoconf gcc make pkg-config libpam0g-dev libcairo2-dev libfontconfig1-dev libxcb-composite0-dev libev-dev libx11-xcb-dev libxcb-xkb-dev libxcb-xinerama0-dev libxcb-randr0-dev libxcb-image0-dev libxcb-util-dev libxcb-xrm-dev libxkbcommon-dev libxkbcommon-x11-dev libjpeg-dev 70 ./build.sh 71 72 - name: Perform CodeQL Analysis 73 uses: github/codeql-action/analyze@v1