From ab744f642856a661646f401a859cc821281d88a6 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 6 Sep 2022 12:54:28 +0000 Subject: [PATCH 01/16] Set up CodeQL for repository See https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/setting-up-code-scanning-for-a-repository#setting-up-code-scanning-using-actions. --- .github/workflows/codeql-analysis.yml | 72 +++++++++++++++++++++++++++ 1 file changed, 72 insertions(+) create mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 0000000..df28e7d --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,72 @@ +# For most projects, this workflow file will not need changing; you simply need +# to commit it to your repository. +# +# You may wish to alter this file to override the set of languages analyzed, +# or to provide custom queries or build logic. +# +# ******** NOTE ******** +# We have attempted to detect the languages in your repository. Please check +# the `language` matrix defined below to confirm you have the correct set of +# supported CodeQL languages. +# +name: "CodeQL" + +on: + push: + branches: [ "main" ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ "main" ] + schedule: + - cron: '36 0 * * 5' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ 'cpp', 'java' ] + # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] + # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file. + # By default, queries listed here will override any specified in a config file. + # Prefix the list here with "+" to use these queries and those in the config file. + + # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs + # queries: security-extended,security-and-quality + + + # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). + # If this step fails, then you should remove it and run the build manually (see below) + - name: Autobuild + uses: github/codeql-action/autobuild@v2 + + # ℹī¸ Command-line programs to run using the OS shell. + # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun + + # If the Autobuild fails above, remove it and uncomment the following three lines. + # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. + + # - run: | + # echo "Run, Build Application using script" + # ./location_of_script_within_repo/buildscript.sh + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 From d478e788f463a76e04dbeb6161e629cce2f04a29 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 11 Oct 2022 15:26:31 +0000 Subject: [PATCH 02/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index df28e7d..602c6ca 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -55,8 +55,9 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - - name: Autobuild - uses: github/codeql-action/autobuild@v2 + # Disable Autobuild as the repository has build CIs. + # - name: Autobuild + # uses: github/codeql-action/autobuild@v2 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun From ca1c459b32db2d2ece4b375df7adcc5c62218aed Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Thu, 13 Oct 2022 13:57:26 +0000 Subject: [PATCH 03/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 602c6ca..aee689a 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -65,9 +65,25 @@ jobs: # If the Autobuild fails above, remove it and uncomment the following three lines. # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. - # - run: | - # echo "Run, Build Application using script" - # ./location_of_script_within_repo/buildscript.sh + - run: | + echo "Run, Build Application using Bazel" + # Before building, remove cached objects and stop all running Bazel server processes. + bazel clean --expunge + + # Build using the following Bazel flags, to help CodeQL detect the build: + # `--spawn_strategy=local`: build locally, instead of using a distributed build + # `--nouse_action_cache`: turn off build caching, which might prevent recompilation of source code + # `--noremote_accept_cached`, `--noremote_upload_local_results`: avoid using a remote cache + codeql database create cpp-database --language=cpp \ + --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/...' + + codeql database create java-database --language=java \ + --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo' + + # After building, stop all running Bazel server processes. + # This ensures future build commands start in a clean Bazel server process + # without CodeQL attached. + bazel shutdown - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 From 1c00e4642dd80b4de93ceb9d4bbe83136b961971 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:08:13 +0000 Subject: [PATCH 04/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index aee689a..61bd891 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -23,7 +23,7 @@ on: jobs: analyze: name: Analyze - runs-on: ubuntu-latest + runs-on: ubuntu-18.04 permissions: actions: read contents: read From 3f6e36dbf72019842c500bb72d79a4496871c9f1 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:32:51 +0000 Subject: [PATCH 05/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 61bd891..80591ae 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -65,7 +65,8 @@ jobs: # If the Autobuild fails above, remove it and uncomment the following three lines. # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. - - run: | + - name: Build Application using Bazel + run: | echo "Run, Build Application using Bazel" # Before building, remove cached objects and stop all running Bazel server processes. bazel clean --expunge From 4a66897a6d4719ed9ce529a55b27301d1749da47 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:34:03 +0000 Subject: [PATCH 06/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 30 +++++++++++++-------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 80591ae..6c72859 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -67,24 +67,24 @@ jobs: - name: Build Application using Bazel run: | - echo "Run, Build Application using Bazel" - # Before building, remove cached objects and stop all running Bazel server processes. - bazel clean --expunge + echo "Run, Build Application using Bazel" + # Before building, remove cached objects and stop all running Bazel server processes. + bazel clean --expunge - # Build using the following Bazel flags, to help CodeQL detect the build: - # `--spawn_strategy=local`: build locally, instead of using a distributed build - # `--nouse_action_cache`: turn off build caching, which might prevent recompilation of source code - # `--noremote_accept_cached`, `--noremote_upload_local_results`: avoid using a remote cache - codeql database create cpp-database --language=cpp \ - --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/...' + # Build using the following Bazel flags, to help CodeQL detect the build: + # `--spawn_strategy=local`: build locally, instead of using a distributed build + # `--nouse_action_cache`: turn off build caching, which might prevent recompilation of source code + # `--noremote_accept_cached`, `--noremote_upload_local_results`: avoid using a remote cache + codeql database create cpp-database --language=cpp \ + --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/...' - codeql database create java-database --language=java \ - --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo' + codeql database create java-database --language=java \ + --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo' - # After building, stop all running Bazel server processes. - # This ensures future build commands start in a clean Bazel server process - # without CodeQL attached. - bazel shutdown + # After building, stop all running Bazel server processes. + # This ensures future build commands start in a clean Bazel server process + # without CodeQL attached. + bazel shutdown - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 From 853d1a86dfb926bef9b79b8a27d18fea7c17309e Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:37:45 +0000 Subject: [PATCH 07/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 6c72859..a4b5233 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -23,7 +23,7 @@ on: jobs: analyze: name: Analyze - runs-on: ubuntu-18.04 + runs-on: ubuntu-latest permissions: actions: read contents: read From 1a558a9775eb2ff61fb00e31cc2bdc9392436eb8 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:47:05 +0000 Subject: [PATCH 08/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index a4b5233..2e35fef 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -70,6 +70,10 @@ jobs: echo "Run, Build Application using Bazel" # Before building, remove cached objects and stop all running Bazel server processes. bazel clean --expunge + + wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.gz + tar -xvzf ./codeql-bundle-linux64.tar.gz + export PATH="$PATH:$(pwd)/codeql" # Build using the following Bazel flags, to help CodeQL detect the build: # `--spawn_strategy=local`: build locally, instead of using a distributed build From 74d81a5d4afeea7e297386c16a083dbba757196c Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:49:45 +0000 Subject: [PATCH 09/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 2e35fef..134a0cb 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -80,10 +80,10 @@ jobs: # `--nouse_action_cache`: turn off build caching, which might prevent recompilation of source code # `--noremote_accept_cached`, `--noremote_upload_local_results`: avoid using a remote cache codeql database create cpp-database --language=cpp \ - --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/...' + --command="bazel build --cxxopt='-std=c++17' --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/..." codeql database create java-database --language=java \ - --command='bazel build --cxxopt="-std=c++17" --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo' + --command="bazel build --cxxopt='-std=c++17' --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo" # After building, stop all running Bazel server processes. # This ensures future build commands start in a clean Bazel server process From 4745eb8c24eb96763b03992dac6402660d9a25bf Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:57:25 +0000 Subject: [PATCH 10/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 134a0cb..d58c02e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -74,6 +74,7 @@ jobs: wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.gz tar -xvzf ./codeql-bundle-linux64.tar.gz export PATH="$PATH:$(pwd)/codeql" + apt-get install -y python3-numpy # Build using the following Bazel flags, to help CodeQL detect the build: # `--spawn_strategy=local`: build locally, instead of using a distributed build From 93c1ebc9a41c86dde1809c52ed50071b4e35ee73 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 18 Oct 2022 10:59:26 +0000 Subject: [PATCH 11/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d58c02e..b4fdfb9 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -74,7 +74,7 @@ jobs: wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.gz tar -xvzf ./codeql-bundle-linux64.tar.gz export PATH="$PATH:$(pwd)/codeql" - apt-get install -y python3-numpy + sudo apt-get install -y python3-numpy # Build using the following Bazel flags, to help CodeQL detect the build: # `--spawn_strategy=local`: build locally, instead of using a distributed build From 8b37d9c00202e9fc0a5e8432c7d276bb39cd5259 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 25 Oct 2022 13:23:53 +0000 Subject: [PATCH 12/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b4fdfb9..748210e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -81,10 +81,10 @@ jobs: # `--nouse_action_cache`: turn off build caching, which might prevent recompilation of source code # `--noremote_accept_cached`, `--noremote_upload_local_results`: avoid using a remote cache codeql database create cpp-database --language=cpp \ - --command="bazel build --cxxopt='-std=c++17' --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/..." + --command="bazel build --cxxopt=-std=c++17 --experimental_repo_remote_exec --spawn_strategy=local --nouse_action_cache --noremote_accept_cached --noremote_upload_local_results -- //magritte:all //magritte/graphs/... //magritte/calculators/... //magritte/api/... //magritte/examples/... -//magritte/examples/android/..." codeql database create java-database --language=java \ - --command="bazel build --cxxopt='-std=c++17' --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo" + --command="bazel build --cxxopt=-std=c++17 --experimental_repo_remote_exec --define EXCLUDE_OPENCV_SO_LIB=1 //magritte/examples/android/demo/java:magritte_demo" # After building, stop all running Bazel server processes. # This ensures future build commands start in a clean Bazel server process From f3a64a99756bd2d195b1e8fd3cc1e5c0cdfb260b Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 25 Oct 2022 13:37:03 +0000 Subject: [PATCH 13/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 748210e..223285e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -75,6 +75,7 @@ jobs: tar -xvzf ./codeql-bundle-linux64.tar.gz export PATH="$PATH:$(pwd)/codeql" sudo apt-get install -y python3-numpy + sed -i '/include\/opencv4/s/#//g' third_party/opencv_linux.BUILD # Build using the following Bazel flags, to help CodeQL detect the build: # `--spawn_strategy=local`: build locally, instead of using a distributed build From 21ca89840f598ec426e7384cbb4ba47993376d6a Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 25 Oct 2022 13:50:52 +0000 Subject: [PATCH 14/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 223285e..2bee650 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -74,7 +74,9 @@ jobs: wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.gz tar -xvzf ./codeql-bundle-linux64.tar.gz export PATH="$PATH:$(pwd)/codeql" - sudo apt-get install -y python3-numpy + sudo apt-get install -y python3-numpy libopencv-core-dev libopencv-highgui-dev \ + libopencv-calib3d-dev libopencv-features2d-dev \ + libopencv-imgproc-dev libopencv-video-dev sed -i '/include\/opencv4/s/#//g' third_party/opencv_linux.BUILD # Build using the following Bazel flags, to help CodeQL detect the build: From 3b775dce039caa2f6c8cd443e8c79e5b1689c928 Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 25 Oct 2022 14:32:00 +0000 Subject: [PATCH 15/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 2bee650..c2b0631 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -75,8 +75,9 @@ jobs: tar -xvzf ./codeql-bundle-linux64.tar.gz export PATH="$PATH:$(pwd)/codeql" sudo apt-get install -y python3-numpy libopencv-core-dev libopencv-highgui-dev \ - libopencv-calib3d-dev libopencv-features2d-dev \ - libopencv-imgproc-dev libopencv-video-dev + libopencv-calib3d-dev libopencv-features2d-dev \ + libopencv-imgproc-dev libopencv-video-dev \ + mesa-common-dev libegl1-mesa-dev libgles2-mesa-dev sed -i '/include\/opencv4/s/#//g' third_party/opencv_linux.BUILD # Build using the following Bazel flags, to help CodeQL detect the build: From 0df8227331cb5db7bce22109afdb1ca4c328a04c Mon Sep 17 00:00:00 2001 From: Murilo de Lima <149982+murilolima@users.noreply.github.com> Date: Tue, 25 Oct 2022 14:45:40 +0000 Subject: [PATCH 16/16] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index c2b0631..641a5c6 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -76,7 +76,7 @@ jobs: export PATH="$PATH:$(pwd)/codeql" sudo apt-get install -y python3-numpy libopencv-core-dev libopencv-highgui-dev \ libopencv-calib3d-dev libopencv-features2d-dev \ - libopencv-imgproc-dev libopencv-video-dev \ + libopencv-imgproc-dev libopencv-video-dev libopencv-contrib-dev \ mesa-common-dev libegl1-mesa-dev libgles2-mesa-dev sed -i '/include\/opencv4/s/#//g' third_party/opencv_linux.BUILD