chore(security): CodeQL config ext. file

pull/149/head
Guenael 2024-12-09 23:40:47 -05:00
rodzic 146631f2ee
commit 1d88ace929
Nie znaleziono w bazie danych klucza dla tego podpisu
ID klucza GPG: EB828109AAA6B48B
1 zmienionych plików z 3 dodań i 30 usunięć

Wyświetl plik

@ -2,48 +2,24 @@ name: "CI"
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
schedule:
- cron: '35 20 * * 5'
# schedule:
# - cron: '35 20 * * 5'
jobs:
analyze:
name: Build-Analyze
name: "Analyze-Build-Test"
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'cpp' ]
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v5
with:
python-version: '3.13'
cache: 'pip' # caching pip dependencies
steps:
- name: "Checkout repository"
uses: actions/checkout@v4
- name: "Python setup"
uses: actions/setup-python@v5
with:
python-version: '3.13'
cache: 'pip'
- name: "CodeQL Init"
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
- name: "Install dependencies and build"
run: |
sudo apt-get update
@ -51,9 +27,6 @@ jobs:
pip install cpplint codespell
make
- name: "CodeQL Analysis (SAST)"
uses: github/codeql-action/analyze@v2
- name: "Cppcheck (C/C++ format & best best-practice)"
run: |
cppcheck --std=c11 *.c wsprd/*.c