Mercurial > vim

annotate .github/workflows/codeql-analysis.yml @ 22472:90d5201dee5f v8.2.1784

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
patch 8.2.1784: commits are not scanned for security problems Commit: https://github.com/vim/vim/commit/fa79be6b10e1d34fd697a56e85f6c0ce101f3d62 Author: Bram Moolenaar <Bram@vim.org> Date: Fri Oct 2 10:29:45 2020 +0200 patch 8.2.1784: commits are not scanned for security problems Problem: commits are not scanned for security problems Solution: Enable Github code scanning. (Christian Brabandt, closes https://github.com/vim/vim/issues/7057)
author Bram Moolenaar <Bram@vim.org>
date Fri, 02 Oct 2020 10:30:13 +0200
parents
children 7118d32f94a5
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
22472
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
1 # For most projects, this workflow file will not need changing; you simply need
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
2 # to commit it to your repository.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
3 #
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
4 # You may wish to alter this file to override the set of languages analyzed,
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
5 # or to provide custom queries or build logic.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
6 name: "CodeQL"
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
7
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
8 on:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
9 push:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
10 branches: [master]
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
11 pull_request:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
12 # The branches below must be a subset of the branches above
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
13 branches: [master]
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
14 schedule:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
15 - cron: '0 18 * * 1'
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
16
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
17 jobs:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
18 analyze:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
19 name: Analyze
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
20 runs-on: ubuntu-latest
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
21
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
22 strategy:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
23 fail-fast: false
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
24 matrix:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
25 # Override automatic language detection by changing the below list
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
26 # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
27 language: ['cpp', 'python']
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
28 # Learn more...
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
29 # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
30
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
31 steps:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
32 - name: Checkout repository
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
33 uses: actions/checkout@v2
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
34 with:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
35 # We must fetch at least the immediate parents so that if this is
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
36 # a pull request then we can checkout the head.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
37 fetch-depth: 2
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
38
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
39 # If this run was triggered by a pull request event, then checkout
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
40 # the head of the pull request instead of the merge commit.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
41 - run: git checkout HEAD^2
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
42 if: ${{ github.event_name == 'pull_request' }}
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
43
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
44 # Initializes the CodeQL tools for scanning.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
45 - name: Initialize CodeQL
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
46 uses: github/codeql-action/init@v1
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
47 with:
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
48 languages: ${{ matrix.language }}
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
49 # If you wish to specify custom queries, you can do so here or in a config file.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
50 # By default, queries listed here will override any specified in a config file.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
51 # Prefix the list here with "+" to use these queries and those in the config file.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
52 # queries: ./path/to/local/query, your-org/your-repo/queries@main
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
53
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
54 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
55 # If this step fails, then you should remove it and run the build manually (see below)
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
56 - name: Autobuild
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
57 uses: github/codeql-action/autobuild@v1
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
58
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
59 # ℹī¸ Command-line programs to run using the OS shell.
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
60 # 📚 https://git.io/JvXDl
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
61
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
62 # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
63 # and modify them (or add more) to build your code if your project
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
64 # uses a compiled language
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
65
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
66 #- run: |
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
67 # make bootstrap
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
68 # make release
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
69
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
70 - name: Perform CodeQL Analysis
90d5201dee5f patch 8.2.1784: commits are not scanned for security problems
Bram Moolenaar <Bram@vim.org>
parents:
diff changeset
71 uses: github/codeql-action/analyze@v1