Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .github/codeql/codeql-config.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
# CodeQL configuration for WHCP Windows 11 25H2 certification
# See: https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/static-tools-and-codeql
disable-default-queries: true
packs:
- microsoft/cpp-queries@0.0.4:codeql-suites/cpp-code-scanning.qls
- microsoft/windows-drivers@1.8.0:windows-driver-suites/recommended.qls
54 changes: 54 additions & 0 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
name: "CodeQL Analysis"

on:
push:
paths-ignore:
- '**.md'
- 'LICENSE'

jobs:
codeql:
runs-on: windows-2022
permissions:
security-events: write
steps:
- name: Check out repository code
uses: actions/checkout@v4

- name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: cpp
# Pin CodeQL CLI version for WHCP Windows 11 25H2 certification
# See: https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/static-tools-and-codeql
tools: https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.20.1/codeql-bundle-win64.tar.gz
config-file: .github/codeql/codeql-config.yml

- name: Add MSBuild to PATH
uses: microsoft/setup-msbuild@v2

- name: Build solution
run: |
msbuild FrameworkSensors\FrameworkSensors.sln /property:Configuration=Release /property:Platform=x64

- name: Perform CodeQL analysis
uses: github/codeql-action/analyze@v4
with:
output: sarif-results

- name: Upload SARIF file
uses: actions/upload-artifact@v4
with:
name: codeql-sarif
path: sarif-results

- name: Generate DVL
shell: cmd
run: |
"C:\Program Files (x86)\Windows Kits\10\Tools\dvl\dvl.exe" /manualCreate FrameworkSensors X64 /sarifPath sarif-results

- name: Upload DVL
uses: actions/upload-artifact@v4
with:
name: dvl
path: sarif-results/FrameworkSensors.DVL.XML