CodeQL #8

	name: "CodeQL"

	on:
	workflow_dispatch:
	push:
	branches:
	- master
	- main
	- develop
	pull_request:
	# Excluded path: add the paths you want to ignore instead of deleting the workflow
	paths-ignore:
	- '.github/workflows/*.yml'
	- 'tests/*'

	jobs:
	analyse:
	name: Analyse
	strategy:
	matrix:
	sdk: [ "$NANOSP_SDK" ]
	#'cpp' covers C and C++
	language: [ 'cpp' ]
	runs-on: ubuntu-latest
	container:
	image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-lite:latest

	steps:
	- name: Clone
	uses: actions/checkout@v3

	#- name: Explore
	# run: \|
	# apk add tree
	# tree / > /tmp/tree.txt

	#- name: Upload tree
	# uses: actions/upload-artifact@v3
	# with:
	# name: tree
	# path: /tmp/tree.txt

	#- name: Create volume archive
	# run: \|
	# tar cvzf /tmp/volume.tar.gz /__t

	#- name: Upload volume
	# uses: actions/upload-artifact@v3
	# with:
	# name: volume
	# path: /tmp/volume.tar.gz

	- name: Install JRE
	run: \|
	apk add openjdk17-jre-headless

	- name: Initialize CodeQL
	env:
	CODEQL_JAVA_HOME: /usr/lib/jvm/java-17-openjdk
	uses: github/codeql-action/init@v2
	with:
	languages: ${{ matrix.language }}
	queries: security-and-quality

	# CodeQL will create the database during the compilation
	- name: Build
	run: \|
	make BOLOS_SDK=${{ matrix.sdk }}

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v2

Provide feedback