Skip to content

CodeQL

CodeQL #15

Workflow file for this run

name: "CodeQL"
on:
push:
branches: [ "main", "dev-2.0.0" ]
pull_request:
branches: [ "main" ]
schedule:
- cron: "24 15 * * 3"
permissions:
contents: read
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ python, cpp ]
steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: Install dependencies
run: |
sudo apt-get update -q
sudo apt-get install -qqy nasm
- name: Initialize CodeQL
uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
with:
languages: ${{ matrix.language }}
queries: +security-and-quality
- name: Build the driver
run: |
cd drivers/linux
make
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
with:
category: "/language:${{ matrix.language }}"