diff options
-rw-r--r-- | .github/workflows/codeql-analysis.yml | 71 |
1 files changed, 71 insertions, 0 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 0000000..9de367e --- /dev/null +++ b/.github/workflows/codeql-analysis.yml | |||
@@ -0,0 +1,71 @@ | |||
1 | # For most projects, this workflow file will not need changing; you simply need | ||
2 | # to commit it to your repository. | ||
3 | # | ||
4 | # You may wish to alter this file to override the set of languages analyzed, | ||
5 | # or to provide custom queries or build logic. | ||
6 | # | ||
7 | # ******** NOTE ******** | ||
8 | # We have attempted to detect the languages in your repository. Please check | ||
9 | # the `language` matrix defined below to confirm you have the correct set of | ||
10 | # supported CodeQL languages. | ||
11 | # | ||
12 | name: "CodeQL" | ||
13 | |||
14 | on: | ||
15 | push: | ||
16 | branches: [ master ] | ||
17 | pull_request: | ||
18 | # The branches below must be a subset of the branches above | ||
19 | branches: [ master ] | ||
20 | schedule: | ||
21 | - cron: '15 18 * * 0' | ||
22 | |||
23 | jobs: | ||
24 | analyze: | ||
25 | name: Analyze | ||
26 | runs-on: ubuntu-latest | ||
27 | permissions: | ||
28 | actions: read | ||
29 | contents: read | ||
30 | security-events: write | ||
31 | |||
32 | strategy: | ||
33 | fail-fast: false | ||
34 | matrix: | ||
35 | language: [ 'cpp' ] | ||
36 | # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] | ||
37 | # Learn more: | ||
38 | # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed | ||
39 | |||
40 | steps: | ||
41 | - name: Checkout repository | ||
42 | uses: actions/checkout@v2 | ||
43 | |||
44 | # Initializes the CodeQL tools for scanning. | ||
45 | - name: Initialize CodeQL | ||
46 | uses: github/codeql-action/init@v1 | ||
47 | with: | ||
48 | languages: ${{ matrix.language }} | ||
49 | # If you wish to specify custom queries, you can do so here or in a config file. | ||
50 | # By default, queries listed here will override any specified in a config file. | ||
51 | # Prefix the list here with "+" to use these queries and those in the config file. | ||
52 | # queries: ./path/to/local/query, your-org/your-repo/queries@main | ||
53 | |||
54 | - name: Install packages | ||
55 | run: | | ||
56 | sudo apt-get install -y --no-install-recommends m4 gettext automake autoconf make build-essential | ||
57 | sudo apt-get install -y --no-install-recommends perl autotools-dev libdbi-dev libldap2-dev libpq-dev \ | ||
58 | libmysqlclient-dev libradcli-dev libkrb5-dev libdbi0-dev \ | ||
59 | libdbd-sqlite3 libssl-dev libcurl4-openssl-dev liburiparser-dev | ||
60 | |||
61 | - name: Configure build | ||
62 | run: | | ||
63 | ./tools/setup | ||
64 | ./configure --enable-libtap | ||
65 | |||
66 | - name: Build | ||
67 | run: | | ||
68 | make | ||
69 | |||
70 | - name: Perform CodeQL Analysis | ||
71 | uses: github/codeql-action/analyze@v1 | ||