Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 31 additions & 7 deletions .github/workflows/codeql-multiple-repo-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -40,12 +40,6 @@ jobs:
steps:
- name: Checkout central repository
uses: actions/checkout@v4
- name: Checkout CodeQL Coding Standards scripts
uses: actions/checkout@v4
with:
repository: github/codeql-coding-standards
path: codeql-coding-standards-repo # Klonen in diesen Ordner
ref: main # Oder eine spezifische Release-Version, z.B. 'v2.53.0-dev'
# Add coding standard packages and dependencies
- name: Install Python dependencies for Coding Standards scripts
run: |
Expand All @@ -59,19 +53,49 @@ jobs:
id: checkout-repos
run: |
scripts/workflow/checkout_repos.sh
# - name: Setup Bazel
# uses: bazel-contrib/setup-bazel@0.15.0
# with:
# # Avoid downloading Bazel every time.
# bazelisk-cache: true
# # Store build cache per workflow.
# disk-cache: codeql-scan
# # Share repository cache between workflows.
# repository-cache: true
- name: Initialize CodeQL for all repositories
uses: github/codeql-action/init@v4
with:
languages: cpp
build-mode: none
packs: codeql/misra-cpp-coding-standards
packs: codeql/misra-cpp-coding-standards@2.53.0
config-file: ./.github/codeql/codeql-config.yml
# - name: Build all components with Bazel
# run: |
# echo "Building all C++ and Rust targets for CodeQL analysis"
# # Build all targets from the checked-out repositories
# # This ensures CodeQL captures the compilation database
# bazel build --verbose_failures --config=x86_64-linux \
# @score_baselibs//... \
# @score_baselibs_rust//src/... \
# @score_communication//score/mw/com/impl/... \
# @score_persistency//src/... \
# @score_orchestrator//src/... \
# @score_kyron//src/... \
# @score_lifecycle_health//src/... \
# @score_logging//... \
# || true # Continue even if some targets fail
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4
with:
upload-database: false # Don't upload databases for each repo
output: sarif-results/
category: "multi-repo-scan"
- name: Checkout CodeQL Coding Standards scripts
uses: actions/checkout@v4
with:
repository: github/codeql-coding-standards
path: codeql-coding-standards-repo # Klonen in diesen Ordner
ref: main # Oder eine spezifische Release-Version, z.B. 'v2.53.0-dev'
- name: Recategorize Guidelines
if: always()
run: |
Expand Down
Loading