Skip to content

Codeql analysis

Codeql analysis #498

on:
workflow_dispatch:
schedule:
- cron: 0 6 * * *
push:
branches:
- main
paths:
- .github/workflows/codeql-analysis.yml
permissions: {}
name: Codeql analysis
jobs:
c_cpp:
name: CodeQL analysis (MagickCache)
runs-on: ubuntu-24.04
permissions:
contents: read
security-events: write
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
with:
fetch-depth: 2
persist-credentials: false
- name: Install dependencies
run: |
sudo tee /etc/apt/sources.list.d/plucky.list << EOF
deb http://de.archive.ubuntu.com/ubuntu plucky main universe
EOF
sudo tee /etc/apt/preferences.d/pin-plucky << EOF
Package: *
Pin: release n=plucky
Pin-Priority: 100
EOF
sudo apt update
sudo apt install -t plucky libmagickcore-dev
- name: Configure MagickCache
run: |
autoreconf -fiv
./configure
echo "" > config.status
- name: Initialize CodeQL
uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #v4.38.2
with:
languages: c-cpp
- name: Build MagickCache
run: |
make
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #v4.38.2
actions:
name: CodeQL analysis (GitHub Actions)
runs-on: ubuntu-24.04
permissions:
contents: read
security-events: write
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
with:
persist-credentials: false
- name: Initialize CodeQL
uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #v4.38.2
with:
languages: actions
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #v4.38.2