Skip to content

Commit 1a287b2

Browse files
committed
Add CodeQL workflow for static security analysis
1 parent 609c9e1 commit 1a287b2

1 file changed

Lines changed: 62 additions & 0 deletions

File tree

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
name: CodeQL Analysis
2+
3+
on:
4+
push:
5+
branches: [ master ]
6+
pull_request:
7+
branches: [ master ]
8+
schedule:
9+
- cron: '0 3 * * 1'
10+
11+
jobs:
12+
analyze:
13+
name: CodeQL Analyze
14+
runs-on: ubuntu-latest
15+
16+
permissions:
17+
actions: read
18+
contents: read
19+
security-events: write
20+
21+
strategy:
22+
fail-fast: false
23+
matrix:
24+
language: [ 'cpp' ]
25+
26+
steps:
27+
- name: Checkout repository
28+
uses: actions/checkout@v4
29+
30+
- name: Initialize CodeQL
31+
uses: github/codeql-action/init@v3
32+
with:
33+
languages: ${{ matrix.language }}
34+
35+
- name: Install dependencies
36+
run: |
37+
sudo apt-get update
38+
sudo apt-get install -y \
39+
build-essential \
40+
autoconf \
41+
automake \
42+
autopoint \
43+
gettext \
44+
libtool \
45+
libtool-bin \
46+
pkg-config \
47+
libcups2-dev \
48+
libcupsfilters-dev \
49+
ghostscript \
50+
mupdf-tools
51+
52+
- name: Build project
53+
run: |
54+
./autogen.sh
55+
./configure
56+
make
57+
58+
- name: Run tests
59+
run: make check
60+
61+
- name: Perform CodeQL Analysis
62+
uses: github/codeql-action/analyze@v3

0 commit comments

Comments
 (0)