adding new option for default codescanning config #2
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ⚙️ Integration Test Bundle (CPP) | |
| on: | |
| push: | |
| branches: | |
| - '**' | |
| pull_request: | |
| branches: | |
| - '**' | |
| workflow_dispatch: | |
| jobs: | |
| integration-test: | |
| name: Run Bundle Integration Test | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [ 'cpp' ] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Install QLT | |
| id: install-qlt | |
| uses: ./.github/actions/install-qlt-local | |
| with: | |
| qlt-version: 'latest' | |
| add-to-path: true | |
| - name: Validate QLT Installation | |
| shell: bash | |
| run: | | |
| echo -e "Checking QLT Version:" | |
| echo "QLT Home: ${{ steps.install-qlt.outputs.qlt-home }}" | |
| qlt version | |
| - name: Create Bundle (compiled) | |
| shell: bash | |
| run: | | |
| if ! qlt codeql run install --custom-bundle --base example/ ; then | |
| echo "Failed to generate bundle." | |
| exit 1 | |
| fi | |
| # ensure bundle runs | |
| if ! qlt query run install-packs --use-bundle --base example/ ; then | |
| echo "Failed to install query packs with tool." | |
| exit 1 | |
| fi | |
| - name: Validate Bundle Existence | |
| shell: bash | |
| run: | | |
| echo "Checking Bundle Existence" | |
| ls -l ${{ env.QLT_CODEQL_HOME }}/../out/ | |
| - name: Upload Bundle Used | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: codeql-bundle.tar.gz | |
| path: | | |
| ${{ env.QLT_CODEQL_BUNDLE_PATH }} | |
| if-no-files-found: error | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v2 | |
| with: | |
| languages: ${{ matrix.language }} | |
| tools: ${{ env.QLT_CODEQL_BUNDLE_PATH }} | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@v2 | |
| with: | |
| working-directory: integration-tests/${{ matrix.language }}/src/ # Path containing the example application | |
| - name: Perform CodeQL Analysis | |
| id: analysis | |
| uses: github/codeql-action/analyze@v2 | |
| - name: Validate SARIF Location | |
| shell: bash | |
| run: | | |
| # validate we have the actual sarif results | |
| echo "Checking SARIF file location at: ${{ steps.analysis.outputs.sarif-output }}" | |
| ls -l ${{ steps.analysis.outputs.sarif-output }} | |
| - name: Upload SARIF Results | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: actual.sarif | |
| path: | | |
| ${{ steps.analysis.outputs.sarif-output }}/*.sarif | |
| if-no-files-found: error | |
| - name: Validate SARIF Existence | |
| shell: bash | |
| run: | | |
| ls -l ${{ steps.analysis.outputs.sarif-output }}/*.sarif | |
| - name: Validate SARIF Results | |
| shell: bash | |
| run: | | |
| # Compare the expected vs the actual | |
| qlt bundle run validate-integration-tests --expected integration-tests/${{ matrix.language }}/expected.sarif --actual ${{ steps.analysis.outputs.sarif-output }}/${{ matrix.language }}.sarif |