From d7c3f1a86d2563d4a93c43fee03c6853726ae15e Mon Sep 17 00:00:00 2001 From: Stephen Griffin Date: Tue, 12 Nov 2024 16:32:02 -0500 Subject: [PATCH 1/2] remoce codeql from ci so it's only in one workflow --- .github/workflows/github-ci.yml | 17 ----------------- 1 file changed, 17 deletions(-) diff --git a/.github/workflows/github-ci.yml b/.github/workflows/github-ci.yml index f6c56c7..e23c284 100644 --- a/.github/workflows/github-ci.yml +++ b/.github/workflows/github-ci.yml @@ -32,29 +32,12 @@ jobs: with: submodules: 'recursive' - - name: Initialize CodeQL - uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 - with: - languages: "cpp" - - name: "Build" shell: pwsh run: | $path = & "${env:ProgramFiles(x86)}\Microsoft Visual Studio\Installer\vswhere.exe" -latest -property installationPath & $path\MSBuild\Current\Bin\amd64\msbuild.exe /m /p:Configuration="${{matrix.configuration}}" /p:Platform="${{matrix.platform}}" mapistub.sln - - name: Perform CodeQL Analysis - id: analyze - uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 - with: - category: "/language:cpp" - - - name: Upload CodeQL Analysis Results - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 - with: - name: codeql-results-${{ matrix.configuration }}-${{ matrix.platform }} - path: ${{ steps.analyze.outputs.sarif-output }} - publish-test-results: name: "Publish Tests Results" needs: build From ef9afcc9f4e6ad62f0e2bf7b9498c4c442a79a60 Mon Sep 17 00:00:00 2001 From: Stephen Griffin Date: Tue, 12 Nov 2024 16:34:19 -0500 Subject: [PATCH 2/2] add autobuild back to codeql --- .github/workflows/codeql.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9581da7..076845d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -7,7 +7,7 @@ on: pull_request: branches: [ "main" ] schedule: - - cron: '33 1 * * 2' + - cron: '33 1 * * 2' # Run at 1:33 on Tuesdays jobs: analyze: @@ -54,8 +54,8 @@ jobs: # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs # queries: security-extended,security-and-quality - # - name: Autobuild - # uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 + - name: Autobuild + uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 - name: Perform CodeQL Analysis id: analyze