From 14fa1d99177e4fc64595e91347429f7a233686ac Mon Sep 17 00:00:00 2001 From: n4l5u0r <59141606+n4l5u0r@users.noreply.github.com> Date: Mon, 15 Apr 2024 16:25:19 +0200 Subject: [PATCH 1/2] Create codeql_check.yml --- .github/workflows/codeql_check.yml | 45 ++++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 .github/workflows/codeql_check.yml diff --git a/.github/workflows/codeql_check.yml b/.github/workflows/codeql_check.yml new file mode 100644 index 0000000..4c4b209 --- /dev/null +++ b/.github/workflows/codeql_check.yml @@ -0,0 +1,45 @@ +name: "CodeQL" + +on: + workflow_dispatch: + push: + branches: + - master + - main + - develop + pull_request: + # Excluded path: add the paths you want to ignore instead of deleting the workflow + paths-ignore: + - '.github/workflows/*.yml' + - 'tests/*' + +jobs: + analyse: + name: Analyse + strategy: + matrix: + sdk: ["$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK", "$STAX_SDK"] + # 'cpp' covers C and C++ + language: ['cpp'] + runs-on: ubuntu-latest + container: + image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-legacy:latest + + steps: + - name: Clone + uses: actions/checkout@v4 + with: + submodules: true + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + queries: security-and-quality + + # CodeQL will create the database during the compilation + - name: Build + run: | + make BOLOS_SDK=${{ matrix.sdk }} + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 From c5dc92a22df46c50dc61630d3200e97806396aa9 Mon Sep 17 00:00:00 2001 From: n4l5u0r <59141606+n4l5u0r@users.noreply.github.com> Date: Mon, 15 Apr 2024 16:30:18 +0200 Subject: [PATCH 2/2] Delete .github/workflows/codeql.yml --- .github/workflows/codeql.yml | 37 ------------------------------------ 1 file changed, 37 deletions(-) delete mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml deleted file mode 100644 index c9fd320..0000000 --- a/.github/workflows/codeql.yml +++ /dev/null @@ -1,37 +0,0 @@ -name: "CodeQL" - -on: - workflow_dispatch: - push: - pull_request: - branches: - - main - - develop - -jobs: - analyse: - name: Analyse - strategy: - matrix: - sdk: ["$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK", "$STAX_SDK"] - runs-on: ubuntu-latest - container: - image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-legacy:latest - - steps: - - name: Clone - uses: actions/checkout@v3 - with: - submodules: recursive - - - name: Initialize CodeQL - uses: github/codeql-action/init@v2 - with: - languages: cpp - queries: security-and-quality - - - name: Build - run: | - make -j BOLOS_SDK=${{ matrix.sdk }} - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2