mirror of
https://github.com/kmod-project/kmod.git
synced 2026-01-30 03:14:30 +00:00
ee53ca3894
Bumps the all-actions group with 2 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `github/codeql-action` from 3.27.1 to 3.28.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](4f3212b617...b56ba49b26) Updates `codecov/codecov-action` from 4.6.0 to 5.4.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](b9fd7d16f6...0565863a31) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions ... Signed-off-by: dependabot[bot] <support@github.com> Link: https://github.com/kmod-project/kmod/pull/302 Signed-off-by: Lucas De Marchi <lucas.de.marchi@gmail.com>
89 lines
2.6 KiB
YAML
89 lines
2.6 KiB
YAML
# SPDX-FileCopyrightText: 2024 Emil Velikov <emil.l.velikov@gmail.com>
|
|
# SPDX-FileCopyrightText: 2024 Lucas De Marchi <lucas.de.marchi@gmail.com>
|
|
#
|
|
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
|
|
name: CodeQL
|
|
|
|
on:
|
|
push:
|
|
branches: [master, ci-test]
|
|
pull_request:
|
|
branches: [master]
|
|
schedule:
|
|
- cron: "30 2 * * 0"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-24.04
|
|
permissions:
|
|
actions: read
|
|
security-events: write
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
container:
|
|
- name: 'ubuntu:24.04'
|
|
meson_setup: '-D b_sanitize=none -D build-tests=false'
|
|
|
|
container:
|
|
image: ${{ matrix.container.name }}
|
|
|
|
steps:
|
|
- name: Sparse checkout the local actions
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
sparse-checkout: .github
|
|
|
|
- uses: ./.github/actions/setup-ubuntu
|
|
if: ${{ startsWith(matrix.container.name, 'ubuntu') }}
|
|
|
|
- name: Checkout the whole project
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
|
|
- name: Set the environment
|
|
run: |
|
|
# The second checkout above claims to set safe.directory, yet it
|
|
# doesn't quite work. Perhaps our double/sparse checkout is to blame?
|
|
git config --global --add safe.directory '*'
|
|
|
|
.github/print-kdir.sh >> "$GITHUB_ENV"
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
|
|
with:
|
|
languages: cpp
|
|
queries: +security-and-quality
|
|
|
|
- name: Build
|
|
run: |
|
|
mkdir build && cd build
|
|
meson setup --native-file ../build-dev.ini ${{ matrix.container.meson_setup }} . ..
|
|
meson compile
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
|
|
with:
|
|
category: "/language:cpp"
|
|
upload: false
|
|
output: sarif-results
|
|
|
|
- name: Filter out meson-internal test files
|
|
uses: advanced-security/filter-sarif@f3b8118a9349d88f7b1c0c488476411145b6270d # v1.0.1
|
|
with:
|
|
patterns: |
|
|
-build/meson-private/**/testfile.c
|
|
input: sarif-results/cpp.sarif
|
|
output: sarif-results/cpp.sarif
|
|
|
|
- name: Upload CodeQL results to code scanning
|
|
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
|
|
with:
|
|
sarif_file: sarif-results/cpp.sarif
|
|
category: "/language:cpp"
|