chore(security): CodeQL config & version bump

pull/147/head
Guenael 2024-12-09 23:12:21 -05:00
rodzic 4e409c8dbc
commit a913384b08
Nie znaleziono w bazie danych klucza dla tego podpisu
ID klucza GPG: EB828109AAA6B48B
1 zmienionych plików z 11 dodań i 8 usunięć

Wyświetl plik

@ -2,15 +2,15 @@ name: "CI"
on: on:
push: push:
branches: [ main ]
pull_request: pull_request:
branches: [ main ] branches:
schedule: - 'main'
- cron: '35 20 * * 5' # schedule:
# - cron: '35 20 * * 5'
jobs: jobs:
analyze: analyze:
name: Build-Analyze name: "Analyze-Build-Test"
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
actions: read actions: read
@ -20,14 +20,15 @@ jobs:
strategy: strategy:
fail-fast: false fail-fast: false
matrix: matrix:
language: [ 'cpp' ] include:
- language: c-cpp
steps: steps:
- name: "Checkout repository" - name: "Checkout repository"
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: "CodeQL Init" - name: "CodeQL Init"
uses: github/codeql-action/init@v2 uses: github/codeql-action/init@v3
with: with:
languages: ${{ matrix.language }} languages: ${{ matrix.language }}
@ -39,7 +40,9 @@ jobs:
make make
- name: "CodeQL Analysis (SAST)" - name: "CodeQL Analysis (SAST)"
uses: github/codeql-action/analyze@v2 uses: github/codeql-action/analyze@v3
with:
category: "/language:${{matrix.language}}"
- name: "Cppcheck (C/C++ format & best best-practice)" - name: "Cppcheck (C/C++ format & best best-practice)"
run: | run: |