Commit f5b08cd

authored

feat(codeql): Add CodeQL analysis for interpreted languages (#11662)

1 parent e998f5b commit f5b08cdCopy full SHA for f5b08cd

File tree

+88

-0

lines changed

+88

-0

lines changed

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,7 @@`
`11`	`11`
`12`	`12`	`# CI`
`13`	`13`	`/.github/ @lucasssvaz @me-no-dev @P-R-O-C-H-Y`
	`14`	`+/.github/codeql/ @lucasssvaz`
`14`	`15`	`/.gitlab/ @lucasssvaz`
`15`	`16`	`/tests/ @lucasssvaz @P-R-O-C-H-Y`
`16`	`17`

Lines changed: 26 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,26 @@`
	`1`	`+name: "CodeQL config"`
	`2`	`+`
	`3`	`+packs:`
	`4`	`+ - trailofbits/cpp-queries`
	`5`	`+ - githubsecuritylab/codeql-cpp-queries`
	`6`	`+ - githubsecuritylab/codeql-python-queries`
	`7`	`+`
	`8`	`+queries:`
	`9`	`+ - uses: security-extended`
	`10`	`+ - uses: security-and-quality`
	`11`	`+`
	`12`	`+query-filters:`
	`13`	`+ - exclude:`
	`14`	`+ query path:`
	`15`	`+ - /^experimental\/.*/`
	`16`	`+ - exclude:`
	`17`	`+ tags contain:`
	`18`	`+ - experimental`
	`19`	`+ - exclude:`
	`20`	`+ problem.severity:`
	`21`	`+ - recommendation`
	`22`	`+ - exclude:`
	`23`	`+ id: tob/cpp/use-of-legacy-algorithm`
	`24`	`+`
	`25`	`+paths-ignore:`
	`26`	`+ - tests/**`

Lines changed: 31 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,31 @@`
	`1`	`+name: CodeQL Actions Analysis`
	`2`	`+`
	`3`	`+on:`
	`4`	`+ workflow_dispatch:`
	`5`	`+ push:`
	`6`	`+ branches:`
	`7`	`+ - master`
	`8`	`+ pull_request:`
	`9`	`+ paths:`
	`10`	`+ - ".github/workflows/*.yml"`
	`11`	`+ - ".github/workflows/*.yaml"`
	`12`	`+`
	`13`	`+jobs:`
	`14`	`+ codeql-analysis:`
	`15`	`+ name: CodeQL Actions Analysis`
	`16`	`+ runs-on: ubuntu-latest`
	`17`	`+`
	`18`	`+ steps:`
	`19`	`+ - name: Checkout repository`
	`20`	`+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2`
	`21`	`+`
	`22`	`+ - name: Initialize CodeQL`
	`23`	`+ uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2`
	`24`	`+ with:`
	`25`	`+ languages: actions`
	`26`	`+ config-file: ./.github/codeql/codeql-config.yml`
	`27`	`+`
	`28`	`+ - name: Run CodeQL Analysis`
	`29`	`+ uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2`
	`30`	`+ with:`
	`31`	`+ category: "Analysis: Actions"`

Lines changed: 30 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,30 @@`
	`1`	`+name: CodeQL Python Analysis`
	`2`	`+`
	`3`	`+on:`
	`4`	`+ workflow_dispatch:`
	`5`	`+ push:`
	`6`	`+ branches:`
	`7`	`+ - master`
	`8`	`+ pull_request:`
	`9`	`+ paths:`
	`10`	`+ - "*/.py"`
	`11`	`+`
	`12`	`+jobs:`
	`13`	`+ codeql-analysis:`
	`14`	`+ name: CodeQL Python Analysis`
	`15`	`+ runs-on: ubuntu-latest`
	`16`	`+`
	`17`	`+ steps:`
	`18`	`+ - name: Checkout repository`
	`19`	`+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2`
	`20`	`+`
	`21`	`+ - name: Initialize CodeQL`
	`22`	`+ uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2`
	`23`	`+ with:`
	`24`	`+ languages: python`
	`25`	`+ config-file: ./.github/codeql/codeql-config.yml`
	`26`	`+`
	`27`	`+ - name: Run CodeQL Analysis`
	`28`	`+ uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2`
	`29`	`+ with:`
	`30`	`+ category: "Analysis: Python"`

Comments

(0)