mirror of
https://github.com/kmod-project/kmod.git
synced 2026-01-28 02:14:52 +00:00
dad351539a
Bumps the all-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `6.0.1` | | [yshui/git-clang-format-lint](https://github.com/yshui/git-clang-format-lint) | `1.17` | `1.18` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.18` | `4.31.9` | | [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell) | `2.1` | `2.2` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.4.3` | `5.5.2` | | [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3` | `4` | Updates `actions/checkout` from 4.2.2 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](11bd71901b...8e8c483db8) Updates `yshui/git-clang-format-lint` from 1.17 to 1.18 - [Release notes](https://github.com/yshui/git-clang-format-lint/releases) - [Commits](27f3890c66...0758f498e5) Updates `github/codeql-action` from 3.28.18 to 4.31.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](ff0a06e83c...5d4e8d1aca) Updates `codespell-project/actions-codespell` from 2.1 to 2.2 - [Release notes](https://github.com/codespell-project/actions-codespell/releases) - [Commits](406322ec52...8f01853be1) Updates `codecov/codecov-action` from 5.4.3 to 5.5.2 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](18283e04ce...671740ac38) Updates `peter-evans/repository-dispatch` from 3 to 4 - [Release notes](https://github.com/peter-evans/repository-dispatch/releases) - [Commits](https://github.com/peter-evans/repository-dispatch/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: yshui/git-clang-format-lint dependency-version: '1.18' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: github/codeql-action dependency-version: 4.31.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: codespell-project/actions-codespell dependency-version: '2.2' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: codecov/codecov-action dependency-version: 5.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: peter-evans/repository-dispatch dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Lucas De Marchi <demarchi@kernel.org>
78 lines
2.0 KiB
YAML
78 lines
2.0 KiB
YAML
# SPDX-FileCopyrightText: 2024 Emil Velikov <emil.l.velikov@gmail.com>
|
|
# SPDX-FileCopyrightText: 2024 Lucas De Marchi <lucas.de.marchi@gmail.com>
|
|
#
|
|
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
|
|
name: CodeQL
|
|
|
|
on:
|
|
push:
|
|
branches: [master, ci-test]
|
|
pull_request:
|
|
branches: [master]
|
|
schedule:
|
|
- cron: "30 2 * * 0"
|
|
|
|
env:
|
|
KDIR: 'any'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-24.04
|
|
permissions:
|
|
actions: read
|
|
security-events: write
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- container: 'ubuntu:24.04'
|
|
meson_setup: '-D b_sanitize=none -D build-tests=false'
|
|
|
|
container:
|
|
image: ${{ matrix.container }}
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
|
|
|
|
- name: Setup OS
|
|
uses: ./.github/actions/setup-os
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
|
|
with:
|
|
languages: cpp
|
|
queries: +security-and-quality
|
|
|
|
- name: Build
|
|
run: |
|
|
meson setup --native-file build-dev.ini ${{ matrix.meson_setup }} builddir/
|
|
meson compile -C builddir/
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
|
|
with:
|
|
category: "/language:cpp"
|
|
upload: false
|
|
output: sarif-results
|
|
|
|
- name: Filter out meson-internal test files
|
|
uses: advanced-security/filter-sarif@f3b8118a9349d88f7b1c0c488476411145b6270d # v1.0.1
|
|
with:
|
|
patterns: |
|
|
-builddir/meson-private/**/testfile.c
|
|
input: sarif-results/cpp.sarif
|
|
output: sarif-results/cpp.sarif
|
|
|
|
- name: Upload CodeQL results to code scanning
|
|
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
|
|
with:
|
|
sarif_file: sarif-results/cpp.sarif
|
|
category: "/language:cpp"
|