Urm Cgroup integration (#212) #345
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Advanced" | |
| on: | |
| push: | |
| branches: [ "main", "development" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-24.04 | |
| # CodeQL is not supported on arm64. Hence, we are going ahead with default Ubuntu 24.04 | |
| # Use below runners when supported ! | |
| # group: GHA-CSEPerf-prd-SelfHosted-RG | |
| # labels: [self-hosted, cseperf-prd-u2204-arm64-xlrg-od-ephem] | |
| permissions: | |
| # required for all workflows | |
| security-events: write | |
| # required to fetch internal or private CodeQL packs | |
| packages: read | |
| # only required for workflows in private repositories | |
| actions: read | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - language: c-cpp | |
| build-mode: manual | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| # Add any setup steps before running the `github/codeql-action/init` action. | |
| # This includes steps like installing compilers or runtimes (`actions/setup-node` | |
| # or others). This is typically only required for manual builds. | |
| # - name: Setup runtime (example) | |
| # uses: actions/setup-example@v1 | |
| - name: Install dependencies | |
| run: | | |
| sudo apt update | |
| sudo apt-get install -y gcc-aarch64-linux-gnu | |
| sudo apt-get install -y python3-pip swig yamllint | |
| sudo apt-get install -y python3-setuptools python3-wheel | |
| sudo apt-get install -y cmake pkg-config libyaml-dev | |
| sudo apt-get install -y libsystemd-dev | |
| sudo apt-get install -y libyaml-cpp-dev | |
| # Initializes the CodeQL tools for scanning. | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| queries: security-extended | |
| - name: Run manual build steps | |
| if: matrix.build-mode == 'manual' | |
| shell: bash | |
| run: | | |
| mkdir -p build | |
| cd build | |
| cmake .. -DBUILD_TESTS=ON -DCMAKE_INSTALL_PREFIX="${URM_INSTALL_PREFIX}" | |
| cmake --build . | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |
| with: | |
| category: "/language:${{matrix.language}}" |