mirror of
https://github.com/nlohmann/json.git
synced 2026-11-09 22:12:32 +00:00
Niels Lohmann
b53603e38e
Autobuild compiled the whole test suite. The resulting database was so large that the hosted runner repeatedly lost communication with the server while importing the TRAP files (about 80 minutes in), which left failed CodeQL analyses on develop and on pull requests. Analyze the sources without building them instead. Signed-off-by: Niels Lohmann <mail@nlohmann.me>
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
name: "Code scanning - action"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- develop
|
|
- master
|
|
- release/*
|
|
pull_request:
|
|
schedule:
|
|
- cron: '0 19 * * 1'
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
CodeQL-Build:
|
|
|
|
runs-on: ubuntu-26.04
|
|
permissions:
|
|
security-events: write
|
|
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Checkout repository
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
# Initializes the CodeQL tools for scanning.
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
|
|
with:
|
|
languages: c-cpp
|
|
# Analyze the sources without compiling them. Autobuild compiled the
|
|
# whole test suite and the resulting database was so large that the
|
|
# runner often lost communication with the server while importing it.
|
|
build-mode: none
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
|