1
- # For most projects, this workflow file will not need changing; you simply need
2
- # to commit it to your repository.
3
- #
4
- # You may wish to alter this file to override the set of languages analyzed,
5
- # or to provide custom queries or build logic.
6
- #
7
- # ******** NOTE ********
8
- # We have attempted to detect the languages in your repository. Please check
9
- # the `language` matrix defined below to confirm you have the correct set of
10
- # supported CodeQL languages.
11
- #
12
1
name : " CodeQL"
13
2
14
3
on :
15
4
push :
16
5
branches : ["master"]
17
6
pull_request :
18
- # The branches below must be a subset of the branches above
19
7
branches : ["master"]
20
8
schedule :
9
+ # Run every Monday at midnight
21
10
- cron : " 0 0 * * 1"
22
11
23
12
permissions :
@@ -36,39 +25,21 @@ jobs:
36
25
fail-fast : false
37
26
matrix :
38
27
language : ["cpp", "python"]
39
- # CodeQL supports [ $supported-codeql-languages ]
40
- # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
41
28
42
29
steps :
43
30
- name : Checkout repository
44
31
uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
45
32
46
- # Initializes the CodeQL tools for scanning.
47
33
- name : Initialize CodeQL
48
- uses : github/codeql-action/init@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
34
+ uses : github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
49
35
with :
50
36
languages : ${{ matrix.language }}
51
- # If you wish to specify custom queries, you can do so here or in a config file.
52
- # By default, queries listed here will override any specified in a config file.
53
- # Prefix the list here with "+" to use these queries and those in the config file.
54
37
55
- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
56
- # If this step fails, then you should remove it and run the build manually (see below)
57
38
- name : Autobuild
58
- uses : github/codeql-action/autobuild@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
59
-
60
- # ℹ️ Command-line programs to run using the OS shell.
61
- # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
62
-
63
- # If the Autobuild fails above, remove it and uncomment the following three lines.
64
- # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
65
-
66
- # - run: |
67
- # echo "Run, Build Application using script"
68
- # ./location_of_script_within_repo/buildscript.sh
39
+ uses : github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
69
40
70
41
- name : Perform CodeQL Analysis
71
- uses : github/codeql-action/analyze@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
42
+ uses : github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
72
43
with :
73
44
category : " /language:${{matrix.language}}"
74
45
86
57
run : rustup component add clippy
87
58
88
59
- name : Install cargo-binstall
89
- uses : cargo-bins/cargo-binstall@v1 .10.6
60
+ uses : cargo-bins/cargo-binstall@c175bb02c4d5486f22e1a9cb4186cb6097f01434 # 1 .10.23
90
61
91
62
- name : Install dependencies
92
63
run : cargo binstall --no-confirm clippy-sarif sarif-fmt
103
74
run : sarif-fmt --input rust/clippy.sarif
104
75
105
76
- name : Upload analysis
106
- uses : github/codeql-action/upload-sarif@v3
77
+ uses : github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
107
78
with :
108
79
sarif_file : rust/clippy.sarif
109
80
wait-for-processing : true
0 commit comments