fix

Author: lucasssvaz

.github/workflows/codeql_interpreted.yml

@@ -31,3 +31,5 @@ jobs:
 
       - name: Run CodeQL Analysis
         uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        with:
+          category: "Analysis: ${{ matrix.language }}"

.github/workflows/push.yml

@@ -227,8 +227,26 @@ jobs:
         uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         if: ${{ env.RUN_CODEQL }}
         with:
-          check_name: "Arduino Linux"
-          category: "Chunk ${{ matrix.chunk }}"
+          category: "Arduino Linux Chunk ${{ matrix.chunk }}"
+          output: sarif-results
+          upload: failure-only
+
+      - name: Filter CodeQL Results
+        uses: advanced-security/filter-sarif@v1
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          patterns: |
+            +**/*
+            -tools/**
+          input: sarif-results/cpp.sarif
+          output: sarif-results/cpp.sarif
+
+      - name: Upload filtered SARIF
+        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          sarif_file: sarif-results/cpp.sarif
+          category: "Arduino Linux Chunk ${{ matrix.chunk }}"
 
       #Upload cli compile json as artifact
       - name: Upload cli compile json
@@ -270,8 +288,26 @@ jobs:
         uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         if: ${{ env.RUN_CODEQL }}
         with:
-          check_name: "Arduino Windows/MacOS"
-          category: "${{ matrix.os }}"
+          category: "Arduino ${{ matrix.os }}"
+          output: sarif-results
+          upload: failure-only
+
+      - name: Filter CodeQL Results
+        uses: advanced-security/filter-sarif@v1
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          patterns: |
+            +**/*
+            -tools/**
+          input: sarif-results/cpp.sarif
+          output: sarif-results/cpp.sarif
+
+      - name: Upload filtered SARIF
+        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          sarif_file: sarif-results/cpp.sarif
+          category: "Arduino ${{ matrix.os }}"
 
   build-esp-idf-component:
     name: Build with ESP-IDF ${{ matrix.idf_ver }} for ${{ matrix.idf_target }}
@@ -311,6 +347,15 @@ jobs:
       - name: Setup jq
         uses: dcarbone/install-jq-action@e397bd87438d72198f81efd21f876461183d383a # v3.0.1
 
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          languages: cpp
+          build-mode: manual
+          source-root: components/arduino-esp32
+          config-file: ./components/arduino-esp32/.github/codeql/codeql-config.yml
+
       - name: Build
         env:
           IDF_TARGET: ${{ matrix.idf_target }}
@@ -319,6 +364,31 @@ jobs:
           chmod a+x ./components/arduino-esp32/.github/scripts/*
           ./components/arduino-esp32/.github/scripts/on-push-idf.sh
 
+      - name: Run CodeQL Analysis
+        uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          category: "Arduino as IDF Component for ${{ matrix.idf_target }}"
+          output: sarif-results
+          upload: failure-only
+
+      - name: Filter CodeQL Results
+        uses: advanced-security/filter-sarif@v1
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          patterns: |
+            +**/*
+            -tools/**
+          input: sarif-results/cpp.sarif
+          output: sarif-results/cpp.sarif
+
+      - name: Upload filtered SARIF
+        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        if: ${{ env.RUN_CODEQL }}
+        with:
+          sarif_file: sarif-results/cpp.sarif
+          category: "Arduino as IDF Component for ${{ matrix.idf_target }}"
+
       - name: Upload generated sdkconfig files for debugging
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         if: always()