Fix Amazon Q workflow to analyze C/C++ codebases

[Copilot]

The Amazon Q code review workflow reported "0 files analyzed" because it only scanned Python/JS/TS/Java/Go files, missing the C/C++ codebase entirely.

Changes

Workflow Enhancement (.github/workflows/auto-amazonq-review.yml)

• File scanning: Added .c, .cpp, .h, .hpp patterns to find command
• C/C++ security analysis:
  • Unsafe function detection: strcpy, strcat, sprintf, gets, scanf
  • Memory management tracking: malloc/free and new/delete patterns
  • Buffer overflow, NULL pointer, use-after-free checks
• Regex improvements: Switched to grep -E with word boundaries (\b) to prevent false positives
• Architecture metrics: Counts header files, Makefiles, READMEs

Documentation

• AMAZON_Q_REVIEW.md: Workflow features, configuration, recommendations
• AMAZON_Q_RESPONSE.md: Analysis results, security findings, action items

Example Output

Before:

Total source files analyzed: 0

After:

Total source files analyzed: 32
C/C++ source files: 32

✓ No hardcoded secrets detected
✓ No unsafe C function usage detected
Memory allocation patterns: 0 allocations, 24 deallocations

The workflow now detects all 32 C files and provides meaningful security analysis for systems programming codebases.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Amazon Q Code Review - 2025-12-27</issue_title>
<issue_description># Amazon Q Code Review Report

This review was triggered after GitHub Copilot agent workflows completed.

Amazon Q Code Review Report

Review Date: 2025-12-27 00:13:33 UTC

Code Quality Assessment

Following the GitHub Copilot agent reviews, Amazon Q provides additional insights:

Code Structure Analysis

• Total source files analyzed: 0

Security Considerations

• Credential scanning: Check for hardcoded secrets
• Dependency vulnerabilities: Review package versions
• Code injection risks: Validate input handling

Performance Optimization Opportunities

• Algorithm efficiency: Review computational complexity
• Resource management: Check for memory leaks and resource cleanup
• Caching opportunities: Identify repeated computations

Architecture and Design Patterns

• Design patterns usage: Verify appropriate pattern application
• Separation of concerns: Check module boundaries
• Dependency management: Review coupling and cohesion

Integration with Previous Reviews

This review complements the GitHub Copilot agent findings with:

• Additional security analysis
• AWS best practices recommendations
• Performance optimization suggestions
• Enterprise architecture patterns

Next Steps

1. Review findings from both GitHub Copilot and Amazon Q
2. Prioritize issues based on severity and impact
3. Create action items for high-priority findings
4. Schedule follow-up reviews for resolved items

Review Context

• Triggered by: Complete CI/CD Agent Review Pipeline
• Repository: P4X-ng/af_xdp
• Branch: main
• Commit: 0974125

Related Reviews

Check for related issues with these labels:

• code-cleanliness - Code structure and organization
• test-coverage - Test quality and Playwright usage
• documentation - Documentation completeness

Instructions for Amazon Q Integration

To enable full Amazon Q integration:

1. Set up AWS credentials in repository secrets:

   • AWS_ACCESS_KEY_ID
   • AWS_SECRET_ACCESS_KEY

2. Install Amazon Q Developer CLI (when available):

   • Follow AWS documentation for Amazon Q setup
   • Configure repository access

3. Enable Amazon CodeWhisperer for security scanning

4. Configure custom review rules based on your needs

Action Items

• Review Amazon Q findings
• Compare with GitHub Copilot recommendations
• Prioritize and assign issues
• Implement high-priority fixes
• Update documentation as needed

---

This issue was automatically generated by the Amazon Q Review workflow.
</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Amazon Q Code Review - 2025-12-27 #26

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[mergify]

⚠️ The sha of the head commit of this PR conflicts with #30. Mergify cannot evaluate rules on this PR. ⚠️