diff options
| author | Phaedrus Leeds <mwleeds@endlessos.org> | 2020-12-17 22:21:26 -0800 |
|---|---|---|
| committer | Alexander Larsson <alexander.larsson@gmail.com> | 2020-12-21 09:08:13 +0100 |
| commit | f47274d38b346d944eaa756c07959d02ef185189 (patch) | |
| tree | 273d138096aab7d83f6e14f86f02a8bdd0830777 /.github | |
| parent | f2b2ce997dba74f7adef7751d2f0ec5f38554e3d (diff) | |
| download | flatpak-f47274d38b346d944eaa756c07959d02ef185189.tar.gz | |
CI: Add action for CodeQL analysis
Use an Action instead of LGTM.com, as suggested here:
https://github.com/flatpak/flatpak/pull/3970#issuecomment-747658238
Re-use the clang build action for resource efficiency.
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/check.yml | 20 |
1 files changed, 19 insertions, 1 deletions
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index 0f99ea00..f98435f8 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -96,9 +96,25 @@ jobs: path: test-logs clang: - name: Build with clang + name: Build with clang and analyze runs-on: ubuntu-18.04 + strategy: + fail-fast: false + matrix: + language: [ 'cpp', 'python' ] + # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] + # Learn more: + # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed steps: + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file. + # By default, queries listed here will override any specified in a config file. + # Prefix the list here with "+" to use these queries and those in the config file. + # queries: ./path/to/local/query, your-org/your-repo/queries@main - name: Install Dependencies run: | sudo add-apt-repository ppa:alexlarsson/flatpak @@ -128,6 +144,8 @@ jobs: CFLAGS: -Werror=unused-variable - name: Build flatpak run: make -j $(getconf _NPROCESSORS_ONLN) + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 xenial: name: Build with old glib |