From ee006f18c8c7ca0fa7d85815fe1a90df6c4724ce Mon Sep 17 00:00:00 2001 From: dail8859 Date: Wed, 20 Sep 2023 14:09:26 -0400 Subject: [PATCH] Create codeql.yml --- .github/workflows/codeql.yml | 52 ++++++++++++++++++++++++++++++++++++ 1 file changed, 52 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 000000000..68f7bfe37 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,52 @@ +name: "CodeQL Analysis" + +on: + push: + branches: [ "master" ] + pull_request: + branches: [ "master" ] + schedule: + - cron: '18 7 * * 1' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-24.04 + permissions: + actions: read + contents: read + security-events: write + + steps: + - name: Checkout Repository + uses: actions/checkout@v6 + + - name: Install Qt + uses: jurplel/install-qt-action@v4 + with: + version: '6.5' + modules: 'qt5compat' + cache: true + + - name: Install Linux Dependencies + run: | + sudo apt-get update + sudo apt-get install -y libxkbcommon-dev libxkbcommon-x11-0 fuse libxcb-cursor-dev libcups2-dev ninja-build + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: 'cpp' + queries: security-extended + + - name: Configure + run: cmake -S . -B build -G Ninja -DCMAKE_BUILD_TYPE=Release + + - name: Build + # CodeQL traces this build to understand the code structure + run: cmake --build build --parallel + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:cpp" \ No newline at end of file