| name: "CodeQL" |
| |
| on: |
| push: |
| branches: [master] |
| pull_request: |
| # The branches below must be a subset of the branches above |
| branches: [master] |
| schedule: |
| - cron: '0 8 * * 3' |
| |
| jobs: |
| analyze: |
| name: Analyze |
| runs-on: ubuntu-latest |
| |
| strategy: |
| fail-fast: false |
| matrix: |
| # Override automatic language detection by changing the below list |
| # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python'] |
| language: ['c-cpp'] |
| # Learn more... |
| # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection |
| |
| steps: |
| - name: Checkout repository |
| uses: actions/checkout@v6 |
| |
| # Initializes the CodeQL tools for scanning. |
| - name: Initialize CodeQL |
| uses: github/codeql-action/init@v4 |
| with: |
| languages: ${{ matrix.language }} |
| trap-caching: false |
| |
| - run: | |
| sudo apt-get install -y ninja-build pipx gcc g++ |
| pip3 install meson==1.3.2 |
| "$HOME/.local/bin/meson" setup build |
| |
| - name: Perform CodeQL Analysis |
| uses: github/codeql-action/analyze@v4 |