[CHORE] fedora codeql yml fix #6
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Analysis for Anvilock in Fedora" | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| jobs: | |
| codeql: | |
| runs-on: ubuntu-latest # GitHub Actions runner (Ubuntu, but we will use Fedora inside Docker) | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [ "c" ] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: CodeQL Analysis in Fedora (Docker) | |
| run: | | |
| docker run --rm -v ${{ github.workspace }}:/workspace -w /workspace fedora:latest bash -c " | |
| # Update and install necessary dependencies | |
| dnf update -y && | |
| dnf install -y gcc make cmake wget curl git && | |
| # Install CodeQL CLI inside the container | |
| wget https://github.com/github/codeql-action/releases/download/v2.6.0/codeql-linux64.tar.gz && | |
| tar -xzf codeql-linux64.tar.gz && | |
| export PATH=\$PWD/codeql-linux64/codeql:\$PATH && | |
| # Run the build script | |
| cd .github/workflows/ && | |
| chmod +x build-fedora.sh && | |
| ./build-fedora.sh && | |
| # Initialize and run CodeQL analysis | |
| codeql database init --language=c --db-dir=codeql-database && | |
| codeql database analyze --db-dir=codeql-database --format=sarif-latest --output=codeql-results.sarif" | |
| - name: Upload CodeQL results | |
| uses: github/codeql-action/upload-results@v2 | |
| with: | |
| results-file: codeql-results.sarif | |