From 92ffac005d345fd2f40582fd95bb3e89c2677b60 Mon Sep 17 00:00:00 2001 From: Alberto Spelta Date: Sun, 15 Jan 2023 16:01:45 +0100 Subject: [PATCH] Add CodeQL config to include quality queries --- .github/codeql/codeql-config.yml | 4 ++++ .github/workflows/codeql.yml | 7 ++++--- 2 files changed, 8 insertions(+), 3 deletions(-) create mode 100644 .github/codeql/codeql-config.yml diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml new file mode 100644 index 0000000..8c91d78 --- /dev/null +++ b/.github/codeql/codeql-config.yml @@ -0,0 +1,4 @@ +name: "CodeQL config" + +queries: + - uses: security-and-quality \ No newline at end of file diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c66d61b..efcc4f5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -30,19 +30,20 @@ jobs: - name: Checkout repository uses: actions/checkout@v3 - - name: Initialize CodeQL + - name: CodeQL init uses: github/codeql-action/init@v2 with: languages: ${{ matrix.language }} + config-file: ./.github/codeql/codeql-config.yml # - name: Autobuild # uses: github/codeql-action/autobuild@v2 - if: matrix.language == 'csharp' - name: Build CSharp + name: .NET build run: dotnet build Minsk.Compiler.slnf - - name: Perform CodeQL Analysis + - name: CodeQL analyze uses: github/codeql-action/analyze@v2 with: category: "/language:${{ matrix.language }}" \ No newline at end of file