xref: /freebsd/sys/contrib/openzfs/.github/workflows/codeql.yml (revision fd45b686f9d92f583366c75b22c04c7ee49709c0)
1dbd5678dSMartin Matuskaname: "CodeQL"
2dbd5678dSMartin Matuska
3dbd5678dSMartin Matuskaon:
4dbd5678dSMartin Matuska  push:
5dbd5678dSMartin Matuska  pull_request:
6dbd5678dSMartin Matuska
7dbd5678dSMartin Matuskajobs:
8dbd5678dSMartin Matuska  analyze:
9dbd5678dSMartin Matuska    name: Analyze
10dbd5678dSMartin Matuska    runs-on: ubuntu-latest
11dbd5678dSMartin Matuska    permissions:
12dbd5678dSMartin Matuska      actions: read
13dbd5678dSMartin Matuska      contents: read
14dbd5678dSMartin Matuska      security-events: write
15dbd5678dSMartin Matuska
16dbd5678dSMartin Matuska    strategy:
17dbd5678dSMartin Matuska      fail-fast: false
18dbd5678dSMartin Matuska      matrix:
19dbd5678dSMartin Matuska        language: [ 'cpp', 'python' ]
20dbd5678dSMartin Matuska
21dbd5678dSMartin Matuska    steps:
22bb2d13b6SMartin Matuska    - name: Set make jobs
23bb2d13b6SMartin Matuska      run: |
24bb2d13b6SMartin Matuska        echo "MAKEFLAGS=-j$(nproc)" >> $GITHUB_ENV
25bb2d13b6SMartin Matuska
26dbd5678dSMartin Matuska    - name: Checkout repository
27*fd45b686SMartin Matuska      uses: actions/checkout@v4
28dbd5678dSMartin Matuska
29dbd5678dSMartin Matuska    - name: Initialize CodeQL
30dbd5678dSMartin Matuska      uses: github/codeql-action/init@v2
31dbd5678dSMartin Matuska      with:
32*fd45b686SMartin Matuska        config-file: .github/codeql-${{ matrix.language }}.yml
33dbd5678dSMartin Matuska        languages: ${{ matrix.language }}
34dbd5678dSMartin Matuska
35dbd5678dSMartin Matuska    - name: Autobuild
36dbd5678dSMartin Matuska      uses: github/codeql-action/autobuild@v2
37dbd5678dSMartin Matuska
38dbd5678dSMartin Matuska    - name: Perform CodeQL Analysis
39dbd5678dSMartin Matuska      uses: github/codeql-action/analyze@v2
40dbd5678dSMartin Matuska      with:
41dbd5678dSMartin Matuska        category: "/language:${{matrix.language}}"
42