From ad67a4b9b8d38f4eb82d90c2b2da032bccb2b17d Mon Sep 17 00:00:00 2001 From: Amna Shafiq <91342046+MainaisGud@users.noreply.github.com> Date: Mon, 12 Jun 2023 12:57:20 +0500 Subject: [PATCH 1/3] Create CI.yml --- CI.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 CI.yml diff --git a/CI.yml b/CI.yml new file mode 100644 index 0000000..5b7b0b6 --- /dev/null +++ b/CI.yml @@ -0,0 +1,31 @@ +name: CI + +on: + push: + branches: + - master + pull_request: + branches: + - master + +jobs: + build: + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + + - name: Set up Python + uses: actions/setup-python@v2 + with: + python-version: 3.9 + + - name: Run black + run: black --check . + + - name: Publish artifacts + uses: actions/upload-artifact@v2 + with: + name: package + path: dist/ From e6b9aab7cd657bc1bb5b1a432e6bd735d768d289 Mon Sep 17 00:00:00 2001 From: Amna Shafiq <91342046+MainaisGud@users.noreply.github.com> Date: Mon, 12 Jun 2023 13:02:06 +0500 Subject: [PATCH 2/3] Add files via upload --- SAusingCodeql.yml | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 SAusingCodeql.yml diff --git a/SAusingCodeql.yml b/SAusingCodeql.yml new file mode 100644 index 0000000..8105d99 --- /dev/null +++ b/SAusingCodeql.yml @@ -0,0 +1,39 @@ +name: CodeQL Analysis + +on: + push: + branches: + - main + pull_request: + branches: + - main + +jobs: + analyze: + name: Analyze code + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: python + + - name: Build CodeQL database + run: | + codeql database create --language=python --source-root=. --name=my-database + codeql database analyze --database=my-database --output=results.sarif + - name: Publish findings as comment + run: | + echo "Code scan findings summary:" + cat results.sarif | jq -r '.runs[].tool.driver.runs[].results[].message.text' | awk '!seen[$0]++' | sed -E -e 's/(.)/\1 /g' -e 's/^/ - /' | sed -E ':a;N;$!ba;s/\r{0,1}\n/\\n/g' | sed -E 's/"/\\"/g' > comment.txt + gh issue comment --body-file comment.txt + + + - name: Upload CodeQL results + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: results.sarif From d7812d0599bacf78d0fc79d2a1377caf7ad5511f Mon Sep 17 00:00:00 2001 From: Amna Shafiq <91342046+MainaisGud@users.noreply.github.com> Date: Mon, 12 Jun 2023 13:03:16 +0500 Subject: [PATCH 3/3] Update SAusingCodeql.yml --- SAusingCodeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SAusingCodeql.yml b/SAusingCodeql.yml index 8105d99..07bef40 100644 --- a/SAusingCodeql.yml +++ b/SAusingCodeql.yml @@ -3,10 +3,10 @@ name: CodeQL Analysis on: push: branches: - - main + - master pull_request: branches: - - main + - master jobs: analyze: