Skip to content

Commit

Permalink
Rust: add codeql analysis workflow
Browse files Browse the repository at this point in the history
  • Loading branch information
Paolo Tranquilli committed Oct 25, 2024
1 parent 55d092f commit 272b6d8
Showing 1 changed file with 55 additions and 0 deletions.
55 changes: 55 additions & 0 deletions .github/workflows/rust-analysis.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,55 @@
name: "Code scanning - Rust"

on:
push:
branches:
- main
- 'rc/*'
pull_request:
branches:
- main
- 'rc/*'
paths:
- '**/*.rs'
- '**/Cargo.toml'
- '.github/codeql/codeql-config.yml'
- '.github/actions/fetch-codeql/**'
- '.github/workflows/rust-analysis.yml'
schedule:
- cron: '0 9 * * 1'

env:
CODEQL_ENABLE_EXPERIMENTAL_FEATURES: "true"

jobs:
analyze:
strategy:
matrix:
language: [ 'rust' ]

runs-on: ubuntu-latest

permissions:
contents: read
security-events: write
pull-requests: read

steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Fetch latest nightly CodeQL
uses: ./.github/actions/fetch-codeql

- name: Initialize CodeQL
uses: github/codeql-action/init@main
with:
tools: ${{ env.CODEQL_FETCHED_CODEQL_PATH }}
languages: ${{ matrix.language }}
config-file: ./.github/codeql/codeql-config.yml

- name: Autobuild
uses: github/codeql-action/autobuild@main

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@main

0 comments on commit 272b6d8

Please sign in to comment.