From c3c02d55e7a0290b71b1a0684781e27803589240 Mon Sep 17 00:00:00 2001 From: Brian Date: Fri, 3 Nov 2023 15:38:07 -0400 Subject: [PATCH] Run CodeQL Analysis weekly + incorporate build script into WF --- .github/workflows/codeql-buildscript.sh | 12 ------------ .github/workflows/codeql.yml | 14 ++++++++++++-- 2 files changed, 12 insertions(+), 14 deletions(-) delete mode 100644 .github/workflows/codeql-buildscript.sh diff --git a/.github/workflows/codeql-buildscript.sh b/.github/workflows/codeql-buildscript.sh deleted file mode 100644 index bbb27f4e3..000000000 --- a/.github/workflows/codeql-buildscript.sh +++ /dev/null @@ -1,12 +0,0 @@ -#!/usr/bin/env bash - -cmake -E make_directory build - -sudo apt-get update -qq -sudo apt-get install -y gcc-multilib -sudo apt-get install -y --no-install-recommends libglfw3 libglfw3-dev libx11-dev libxcursor-dev libxrandr-dev libxinerama-dev libxi-dev libxext-dev libxfixes-dev - -BUILD_TYPE=Release -cd build -cmake .. -DCMAKE_BUILD_TYPE=$BUILD_TYPE -DPLATFORM=Desktop -cmake --build . --config $BUILD_TYPE diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 816492278..31e5eaf77 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -15,7 +15,7 @@ on: # push: # branches: [ "main", "master" ] schedule: - - cron: '0 0 * * *' + - cron: '0 0 * * 1' pull_request: branches: '*' @@ -75,7 +75,16 @@ jobs: # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. - run: | - ./.github/workflows/codeql-buildscript.sh + cmake -E make_directory build + + sudo apt-get update -qq + sudo apt-get install -y gcc-multilib + sudo apt-get install -y --no-install-recommends libglfw3 libglfw3-dev libx11-dev libxcursor-dev libxrandr-dev libxinerama-dev libxi-dev libxext-dev libxfixes-dev + + BUILD_TYPE=Release + cd build + cmake .. -DCMAKE_BUILD_TYPE=$BUILD_TYPE -DPLATFORM=Desktop + cmake --build . --config $BUILD_TYPE - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 @@ -103,6 +112,7 @@ jobs: -**:cpp/suspicious-pointer-scaling-void -**:cpp/unsigned-comparison-zero -**/cmake*/Modules/** + -**/src/external/glfw/** input: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif output: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif