diff options
| author | Paul Moore <paul@paul-moore.com> | 2022-01-10 08:12:48 -0700 |
|---|---|---|
| committer | Tom Hromatka <tom.hromatka@oracle.com> | 2022-01-10 08:13:08 -0700 |
| commit | 929acb90c4a3d737c1335b52c7e37eabdf00f829 (patch) | |
| tree | 8647c21f816f6e76bbe961454f2b92e53402296f /.github | |
| parent | 545b9e06a02858603a17daddc2a25ef43a5a8544 (diff) | |
| download | libseccomp-929acb90c4a3d737c1335b52c7e37eabdf00f829.tar.gz | |
github: enable CodeQL code scanning and analysis
This enables the GitHub "Security / Code Scanning" tool using CodeQL.
* https://github.com/seccomp/libseccomp/security
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/codeql-analysis.yml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 0000000..974c518 --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,37 @@ +# +# CodeQL Workflow for libseccomp +# +# Copyright (c) 2022 Microsoft Corporation <paulmoore@microsoft.com> +# Author: Paul Moore <paul@paul-moore.com> +# + +name: "CodeQL" +on: ["push", "pull_request"] + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ 'cpp', 'python' ] + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + - name: Initialize libseccomp + uses: ./.github/actions/setup + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: ${{ matrix.language }} + - name: Autobuild + uses: github/codeql-action/autobuild@v1 + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 |