Run CodeQL Analysis weekly + incorporate build script into WF

This commit is contained in:
Brian 2023-11-03 15:38:07 -04:00
parent e65967dbd6
commit c3c02d55e7
2 changed files with 12 additions and 14 deletions

View File

@ -1,12 +0,0 @@
#!/usr/bin/env bash
cmake -E make_directory build
sudo apt-get update -qq
sudo apt-get install -y gcc-multilib
sudo apt-get install -y --no-install-recommends libglfw3 libglfw3-dev libx11-dev libxcursor-dev libxrandr-dev libxinerama-dev libxi-dev libxext-dev libxfixes-dev
BUILD_TYPE=Release
cd build
cmake .. -DCMAKE_BUILD_TYPE=$BUILD_TYPE -DPLATFORM=Desktop
cmake --build . --config $BUILD_TYPE

View File

@ -15,7 +15,7 @@ on:
# push: # push:
# branches: [ "main", "master" ] # branches: [ "main", "master" ]
schedule: schedule:
- cron: '0 0 * * *' - cron: '0 0 * * 1'
pull_request: pull_request:
branches: '*' branches: '*'
@ -75,7 +75,16 @@ jobs:
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
- run: | - run: |
./.github/workflows/codeql-buildscript.sh cmake -E make_directory build
sudo apt-get update -qq
sudo apt-get install -y gcc-multilib
sudo apt-get install -y --no-install-recommends libglfw3 libglfw3-dev libx11-dev libxcursor-dev libxrandr-dev libxinerama-dev libxi-dev libxext-dev libxfixes-dev
BUILD_TYPE=Release
cd build
cmake .. -DCMAKE_BUILD_TYPE=$BUILD_TYPE -DPLATFORM=Desktop
cmake --build . --config $BUILD_TYPE
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2 uses: github/codeql-action/analyze@v2
@ -103,6 +112,7 @@ jobs:
-**:cpp/suspicious-pointer-scaling-void -**:cpp/suspicious-pointer-scaling-void
-**:cpp/unsigned-comparison-zero -**:cpp/unsigned-comparison-zero
-**/cmake*/Modules/** -**/cmake*/Modules/**
-**/src/external/glfw/**
input: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif input: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif
output: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif output: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif