CodeQL #74
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL" | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| # Run every Friday 3AM | |
| - cron: "0 3 * * 5" | |
| concurrency: | |
| group: ${ {github.event_name }}-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: ${{github.event_name == 'pull_request'}} | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v5 | |
| # Initializes the CodeQL tools for scanning. | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: cpp | |
| - name: Upgrade system and install dependencies | |
| run: | | |
| sudo apt-get -y update | |
| sudo apt-get -y upgrade | |
| sudo apt-get -y install build-essential ninja-build cmake libeigen3-dev libxml2-dev libboost-all-dev petsc-dev python3-dev python3-numpy | |
| - name: Build | |
| env: | |
| CMAKE_GENERATOR: Ninja | |
| CODEQL_EXTRACTOR_CPP_AUTOINSTALL_DEPENDENCIES: false | |
| uses: github/codeql-action/autobuild@v4 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |
| with: | |
| category: "/language:cpp" |