Streamline the input validation in the text transformation library #77
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Semantic Analysis | |
| on: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - '*' | |
| paths-ignore: | |
| - '**.md' | |
| pull_request: | |
| types: [opened, synchronize, reopened, ready_for_review] | |
| branches: | |
| - main | |
| paths-ignore: | |
| - '**.md' | |
| - 'changelog.lua' | |
| - '.gitignore' | |
| schedule: | |
| - cron: '00 00 * * 6' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| jobs: | |
| analyze: | |
| name: Scan with CodeQL | |
| runs-on: 'ubuntu-latest' | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [ 'cpp' ] | |
| steps: | |
| - name: Checkout Git repository | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| fetch-depth: "0" # Required so that git describe actually works (and we can discover version tags) | |
| # Initializes the CodeQL tools for scanning. | |
| - name: Initialize CodeQL scan | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| - name: Set up ccache | |
| uses: hendrikmuhs/[email protected] | |
| - name: Update apt cache | |
| run: sudo apt-get update | |
| - name: Install Ninja | |
| run: sudo apt-get install ninja-build | |
| # Can't actually be used on CI runners, but we need the headers for embedding webview | |
| - name: Install WebKitGTK | |
| run: sudo apt-get install gtk+-3.0-dev webkit2gtk-4.0-dev --yes | |
| - name: Install PulseAudio | |
| run: sudo apt-get install pulseaudio libpulse-dev --yes | |
| - name: Configure environment | |
| run: | | |
| export PATH="/usr/lib/ccache:$PATH" | |
| echo "CC=/usr/lib/ccache/gcc" >> $GITHUB_ENV | |
| echo "CXX=/usr/lib/ccache/g++" >> $GITHUB_ENV | |
| - name: Build dependencies | |
| run: bash deps/unixbuild-all.sh | |
| - name: Build the runtime | |
| run: bash ./unixbuild.sh | |
| - name: Perform CodeQL analysis | |
| uses: github/codeql-action/analyze@v3 | |
| with: | |
| category: "/language:${{matrix.language}}" |