Let's see how this works...

.clang-format

@@ -5,7 +5,7 @@ IndentWidth: 4
 ColumnLimit: 78
 UseTab: Never
 IndentCaseLabels: false
-InsertBraces: false
+#InsertBraces: false
 PointerAlignment: Right
 
 AlwaysBreakAfterReturnType: TopLevelDefinitions
@@ -17,23 +17,23 @@ BinPackParameters: true
 
 AlignAfterOpenBracket: Align
 
-AlignConsecutiveMacros:
- Enabled: true
- AcrossComments: true
- AcrossEmptyLines: false
+#AlignConsecutiveMacros:
+# Enabled: true
+# AcrossComments: true
+# AcrossEmptyLines: false
 
-AlignConsecutiveDeclarations:
- Enabled: true
- AcrossComments: false
- AcrossEmptyLines: false
+#AlignConsecutiveDeclarations:
+# Enabled: true
+# AcrossComments: false
+# AcrossEmptyLines: false
 
-AlignConsecutiveAssignments:
- Enabled: true
- AcrossComments: false
- AcrossEmptyLines: false
+#AlignConsecutiveAssignments:
+# Enabled: true
+# AcrossComments: false
+# AcrossEmptyLines: false
 
-AlignArrayOfStructures: Left
-SortIncludes: Never
+#AlignArrayOfStructures: Left
+#SortIncludes: Never
 SpaceAfterCStyleCast: false
 AllowShortEnumsOnASingleLine: false
 ...

.github/workflows/codeql_checks.yml

@@ -0,0 +1,45 @@
+name: "CodeQL"
+
+on:
+ workflow_dispatch:
+ push:
+ branches:
+ - master
+ - main
+ - develop
+ pull_request:
+ # Excluded path: add the paths you want to ignore instead of deleting the workflow
+ paths-ignore:
+ - '.github/workflows/*.yml'
+ - 'tests/*'
+
+jobs:
+ analyse:
+ name: Analyse
+ strategy:
+ matrix:
+ sdk: [ "$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK" ]
+ #'cpp' covers C and C++
+ language: [ 'cpp' ]
+ runs-on: ubuntu-latest
+ container:
+ image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-legacy:latest
+
+ steps:
+ - name: Clone
+ uses: actions/checkout@v3
+
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v2
+ with:
+ languages: ${{ matrix.language }}
+ queries: security-and-quality
+
+ # CodeQL will create the database during the compilation
+ - name: Build
+ run: |
+ make BOLOS_SDK=${{ matrix.sdk }} -C app
+ make BOLOS_SDK=${{ matrix.sdk }} -C app DEBUG=1
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v2

.github/workflows/coding_style_checks.yml

@@ -0,0 +1,25 @@
+name: Run coding style check through reusable workflow
+
+# This workflow will run linting checks to ensure a level of uniformization among all Ledger applications.
+#
+# The presence of this workflow is mandatory as a minimal level of linting is required.
+# You are however free to modify the content of the .clang-format file and thus the coding style of your application.
+# We simply ask you to not diverge too much from the linting of the Boilerplate application.
+
+on:
+ workflow_dispatch:
+ push:
+ branches:
+ - master
+ - main
+ - develop
+ pull_request:
+
+jobs:
+ check_linting:
+ name: Check linting using the reusable workflow
+ uses: chapeltech/ledger-app-workflows/.github/workflows/reusable_lint.yml@v1
+ with:
+ source: './app/src'
+ extensions: 'h,c'
+ version: 11

.github/workflows/guidelines_enforcer.yml

@@ -0,0 +1,23 @@
+name: Ensure compliance with Ledger guidelines
+
+# This workflow is mandatory in all applications
+# It calls a reusable workflow guidelines_enforcer developed by Ledger's internal developer team.
+# The successful completion of the reusable workflow is a mandatory step for an app to be available on the Ledger
+# application store.
+#
+# More information on the guidelines can be found in the repository:
+# LedgerHQ/ledger-app-workflows/
+
+on:
+ workflow_dispatch:
+ push:
+ branches:
+ - master
+ - main
+ - develop
+ pull_request:
+
+jobs:
+ guidelines_enforcer:
+ name: Call Ledger guidelines_enforcer
+ uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_guidelines_enforcer.yml@v1