Download as
Browse Code »

Commit 6de433633115f7962db446425cfb03cd62a52380

Authored by Perry Werneck
1 parent be2e9490
Exists in develop

Adding codeql workflow.

Showing 2 changed files with 44 additions and 83 deletions   Show diff stats
.github/workflows/codeql-analysis.yml
View file @be2e949
... ... @@ -1,83 +0,0 @@
1   -# For most projects, this workflow file will not need changing; you simply need
2   -# to commit it to your repository.
3   -#
4   -# You may wish to alter this file to override the set of languages analyzed,
5   -# or to provide custom queries or build logic.
6   -name: "CodeQL"
7   -
8   -on:
9   - push:
10   - branches: [master]
11   - pull_request:
12   - # The branches below must be a subset of the branches above
13   - branches: [master]
14   - schedule:
15   - - cron: '0 17 * * 0'
16   -
17   -jobs:
18   - analyze:
19   - name: Analyze
20   - runs-on: ubuntu-latest
21   -
22   - strategy:
23   - fail-fast: false
24   - matrix:
25   - # Override automatic language detection by changing the below list
26   - # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
27   - language: ['cpp']
28   - # Learn more...
29   - # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
30   -
31   - steps:
32   - - name: Checkout repository
33   - uses: actions/checkout@v2
34   - with:
35   - # We must fetch at least the immediate parents so that if this is
36   - # a pull request then we can checkout the head.
37   - fetch-depth: 2
38   -
39   - # If this run was triggered by a pull request event, then checkout
40   - # the head of the pull request instead of the merge commit.
41   - - run: git checkout HEAD^2
42   - if: ${{ github.event_name == 'pull_request' }}
43   -
44   - # Initializes the CodeQL tools for scanning.
45   - - name: Initialize CodeQL
46   - uses: github/codeql-action/init@v1
47   - with:
48   - languages: ${{ matrix.language }}
49   - # If you wish to specify custom queries, you can do so here or in a config file.
50   - # By default, queries listed here will override any specified in a config file.
51   - # Prefix the list here with "+" to use these queries and those in the config file.
52   - # queries: ./path/to/local/query, your-org/your-repo/queries@main
53   -
54   - # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
55   - # If this step fails, then you should remove it and run the build manually (see below)
56   - #- name: Autobuild
57   - # uses: github/codeql-action/autobuild@v1
58   -
59   - # ℹ️ Command-line programs to run using the OS shell.
60   - # 📚 https://git.io/JvXDl
61   -
62   - # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
63   - # and modify them (or add more) to build your code if your project
64   - # uses a compiled language
65   - - name: Install Dependencies
66   - run: |
67   - sudo apt-get install autotools-dev autoconf gettext libssl-dev libcurl4-openssl-dev libgtk-3-dev
68   - git clone https://github.com/PerryWerneck/lib3270.git ./lib3270
69   - NOCONFIGURE=1 ./lib3270/autogen.sh
70   - cd lib3270
71   - ./configure --prefix=/usr
72   - make all
73   - sudo make install
74   - cd ..
75   - sudo rm -fr lib3270
76   -
77   - - name: build
78   - run: |
79   - ./autogen.sh
80   - make Release
81   -
82   - - name: Perform CodeQL Analysis
83   - uses: github/codeql-action/analyze@v1
.github/workflows/codeql.yml 0 → 100644
  Diff comments   View file @6de4336
... ... @@ -0,0 +1,44 @@
  1 +---
  2 +name: CodeQL
  3 +on:
  4 + push:
  5 + branches:
  6 + - master
  7 + pull_request:
  8 + branches:
  9 + - master
  10 + schedule:
  11 + - cron: 48 7 * * 1
  12 +jobs:
  13 + analyze:
  14 + name: Analyze
  15 + runs-on: ubuntu-22.04
  16 + permissions:
  17 + actions: read
  18 + contents: read
  19 + security-events: write
  20 + strategy:
  21 + fail-fast: false
  22 + matrix:
  23 + language:
  24 + - cpp
  25 + steps:
  26 + - name: Checkout
  27 + uses: actions/checkout@v3
  28 + - name: Install Packages
  29 + run: |
  30 + echo 'deb http://download.opensuse.org/repositories/home:/PerryWerneck:/pw3270/xUbuntu_22.04/ /' | sudo tee /etc/apt/sources.list.d/home:PerryWerneck:pw3270.list
  31 + curl -fsSL https://download.opensuse.org/repositories/home:PerryWerneck:pw3270/xUbuntu_22.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_PerryWerneck_pw3270.gpg > /dev/null
  32 + sudo apt-get update
  33 + sudo apt-get install --yes git make autopoint gettext lib3270-dev pkg-config libgtk-3-dev imagemagick lib3270-dev
  34 + - name: Initialize CodeQL
  35 + uses: github/codeql-action/init@v2
  36 + with:
  37 + languages: ${{ matrix.language }}
  38 + queries: +security-and-quality
  39 + - name: Autobuild
  40 + uses: github/codeql-action/autobuild@v2
  41 + - name: Perform CodeQL Analysis
  42 + uses: github/codeql-action/analyze@v2
  43 + with:
  44 + category: /language:${{ matrix.language }}
... ...