Mercurial > vim

annotate .github/workflows/codeql-analysis.yml @ 23221:4046b3d17d60 v8.2.2156

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
patch 8.2.2156: Github actions run on pusing a tag Commit: https://github.com/vim/vim/commit/b5b77378bc35cb268c384e98c59f2bf8cb406270 Author: Bram Moolenaar <Bram@vim.org> Date: Fri Dec 18 13:31:31 2020 +0100 patch 8.2.2156: Github actions run on pusing a tag Problem: Github actions run on pusing a tag. Solution: Don't run CI on tag push. Omit coveralls on pull-request. (Ozaki Kiichi, closes #7489)
author Bram Moolenaar <Bram@vim.org>
date Fri, 18 Dec 2020 13:45:04 +0100
parents 7118d32f94a5
children d4faa2c5211b
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
22472
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
1 # For most projects, this workflow file will not need changing; you simply need
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
2 # to commit it to your repository.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
3 #
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
4 # You may wish to alter this file to override the set of languages analyzed,
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
5 # or to provide custom queries or build logic.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
6 name: "CodeQL"
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
7
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
8 on:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
9 push:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
10 branches: [master]
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
11 pull_request:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
12 # The branches below must be a subset of the branches above
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
13 branches: [master]
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
14 schedule:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
15 - cron: '0 18 * * 1'
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
16
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
17 jobs:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
18 analyze:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
19 name: Analyze
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
20 runs-on: ubuntu-latest
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
21
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
22 strategy:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
23 fail-fast: false
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
24 matrix:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
25 # Override automatic language detection by changing the below list
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
26 # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
27 language: ['cpp', 'python']
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
28 # Learn more...
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
29 # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
30
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
31 steps:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
32 - name: Checkout repository
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
33 uses: actions/checkout@v2
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
34
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
35 # Initializes the CodeQL tools for scanning.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
36 - name: Initialize CodeQL
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
37 uses: github/codeql-action/init@v1
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
38 with:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
39 languages: ${{ matrix.language }}
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
40 # If you wish to specify custom queries, you can do so here or in a config file.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
41 # By default, queries listed here will override any specified in a config file.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
42 # Prefix the list here with "+" to use these queries and those in the config file.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
43 # queries: ./path/to/local/query, your-org/your-repo/queries@main
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
44
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
45 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
46 # If this step fails, then you should remove it and run the build manually (see below)
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
47 - name: Autobuild
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
48 uses: github/codeql-action/autobuild@v1
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
49
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
50 # ℹī¸ Command-line programs to run using the OS shell.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
51 # 📚 https://git.io/JvXDl
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
52
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
53 # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
54 # and modify them (or add more) to build your code if your project
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
55 # uses a compiled language
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
56
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
57 #- run: |
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
58 # make bootstrap
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
59 # make release
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
60
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
61 - name: Perform CodeQL Analysis
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
62 uses: github/codeql-action/analyze@v1