aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.github/codeql/codeql-config.yml3
-rw-r--r--.github/workflows/build.yml16
-rw-r--r--lgtm.yml2
3 files changed, 19 insertions, 2 deletions
diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
new file mode 100644
index 00000000..70acfdfd
--- /dev/null
+++ b/.github/codeql/codeql-config.yml
@@ -0,0 +1,3 @@
+query-filters:
+ - exclude:
+ id: cpp/fixme-comment
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ae8947ab..6a9f393c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -64,6 +64,14 @@ jobs:
with:
submodules: 'true'
+ - name: Initialize CodeQL
+ if: runner.os == 'Linux' && matrix.qt_ver == 6
+ uses: github/codeql-action/init@v2
+ with:
+ config-file: ./.github/codeql/codeql-config.yml
+ queries: security-and-quality
+ languages: cpp, java
+
- name: 'Setup MSYS2'
if: runner.os == 'Windows'
uses: msys2/setup-msys2@v2
@@ -210,6 +218,14 @@ jobs:
ctest --test-dir build --output-on-failure
##
+ # CODE SCAN
+ ##
+
+ - name: Perform CodeQL Analysis
+ if: runner.os == 'Linux' && matrix.qt_ver == 6
+ uses: github/codeql-action/analyze@v2
+
+ ##
# PACKAGE BUILDS
##
diff --git a/lgtm.yml b/lgtm.yml
deleted file mode 100644
index 39cd3036..00000000
--- a/lgtm.yml
+++ /dev/null
@@ -1,2 +0,0 @@
-queries:
- - exclude: "cpp/fixme-comment" # We like to use FIXME