From 35088952af0f6232197f9b381ee53e9893fb96e6 Mon Sep 17 00:00:00 2001 From: Damien-Chen Date: Fri, 21 Nov 2025 12:54:50 +0800 Subject: [PATCH] CI: Add CodeQL static code analysis This commit introduces a GitHub Actions workflow for CodeQL to perform static analysis onthe C/C++ codebase. Signed-off-by: Damien Chen --- .github/workflows/codeql.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 00000000..a404657d --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,31 @@ +name: "CodeQL" +on: + push: + branches: [ main ] + pull_request: + branches: [ main ] +jobs: + analyze: + runs-on: ubuntu-24.04 + steps: + - name: Checkout + uses: actions/checkout@v6 + + - name: Install build dependencies + run: | + sudo apt-get update + sudo apt-get install -y --no-install-recommends build-essential qemu-system-riscv32 wget + + - name: Setup toolchain + run: .ci/setup-toolchain.sh gnu + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + languages: cpp + + - name: Build + run: make -j$(nproc) + + - name: Run CodeQL analysis + uses: github/codeql-action/analyze@v4