actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2306 from actions/update_codeql_template

Browse Source 
Code Scanning Update codeql.yml with new build-mode
This commit is contained in:
Marco Gario
2024-03-26 14:13:08 +01:00
committed by GitHub
parent 61cdce264d fdbad9c74f
commit 4ccc742286
1 changed files with 23 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code-scanning/codeql.yml
+23 -20
View File
@@ -21,7 +21,7 @@ on:
jobs: jobs:
analyze: analyze:
name: Analyze name: Analyze (${{ matrix.language }})
# Runner size impacts CodeQL analysis time. To learn more, please see: # Runner size impacts CodeQL analysis time. To learn more, please see:
# - https://gh.io/recommended-hardware-resources-for-running-codeql # - https://gh.io/recommended-hardware-resources-for-running-codeql
# - https://gh.io/supported-runners-and-hardware-resources # - https://gh.io/supported-runners-and-hardware-resources
@@ -40,12 +40,15 @@ jobs:
strategy: strategy:
fail-fast: false fail-fast: false
matrix: matrix:
language: [ $detected-codeql-languages ] $codeql-languages-matrix
# CodeQL supports [ $supported-codeql-languages ] # CodeQL supports the following values keywords for 'language': $supported-codeql-languages
# Use only 'java-kotlin' to analyze code written in Java, Kotlin or both # Use `c-cpp` to analyze code written in C, C++ or both
# Use only 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
# To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
# see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v4 uses: actions/checkout@v4
@@ -55,6 +58,7 @@ jobs:
uses: github/codeql-action/init@v3 uses: github/codeql-action/init@v3
with: with:
languages: ${{ matrix.language }} languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
# If you wish to specify custom queries, you can do so here or in a config file. # If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file. # By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file. # Prefix the list here with "+" to use these queries and those in the config file.
@@ -62,21 +66,20 @@ jobs:
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
# queries: security-extended,security-and-quality # queries: security-extended,security-and-quality
# If the analyze step fails for one of the languages you are analyzing with
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # "We were unable to automatically build your code", modify the matrix above
# If this step fails, then you should remove it and run the build manually (see below) # to set the build mode to "manual" for that language. Then modify this step
- name: Autobuild # to build your code.
uses: github/codeql-action/autobuild@v3
# ℹ️ Command-line programs to run using the OS shell. # ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
- if: matrix.build-mode == 'manual'
# If the Autobuild fails above, remove it and uncomment the following three lines. run: |
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. echo 'If you are using a "manual" build mode for one or more of the' \
'languages you are analyzing, replace this with the commands to build' \
# - run: | 'your code, for example:'
# echo "Run, Build Application using script" echo ' make bootstrap'
# ./location_of_script_within_repo/buildscript.sh echo ' make release'
exit 1
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3 uses: github/codeql-action/analyze@v3