xref: /freebsd/sys/contrib/openzfs/.github/workflows/codeql.yml (revision 5ca8e32633c4ffbbcd6762e5888b6a4ba0708c6c)
1name: "CodeQL"
2
3on:
4  push:
5  pull_request:
6
7jobs:
8  analyze:
9    name: Analyze
10    runs-on: ubuntu-latest
11    permissions:
12      actions: read
13      contents: read
14      security-events: write
15
16    strategy:
17      fail-fast: false
18      matrix:
19        language: [ 'cpp', 'python' ]
20
21    steps:
22    - name: Set make jobs
23      run: |
24        echo "MAKEFLAGS=-j$(nproc)" >> $GITHUB_ENV
25
26    - name: Checkout repository
27      uses: actions/checkout@v4
28
29    - name: Initialize CodeQL
30      uses: github/codeql-action/init@v2
31      with:
32        config-file: .github/codeql-${{ matrix.language }}.yml
33        languages: ${{ matrix.language }}
34
35    - name: Autobuild
36      uses: github/codeql-action/autobuild@v2
37
38    - name: Perform CodeQL Analysis
39      uses: github/codeql-action/analyze@v2
40      with:
41        category: "/language:${{matrix.language}}"
42