codeql-analysis.yml

# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
name: "CodeQL"

on:
  workflow_dispatch:
  pull_request:
    paths:
      - ".github/workflows/codeql-analysis.yml"
      - "apps/**"
      - "bindings/**"
      - "cmake/**"
      - "include/**"
      - "libs/**"
      - "src/**"
      - "!src/electionguard-ui/**"
      - "test/**"
    branches: [main]
  # schedule:
  #   - cron: "0 7 * * 4"

jobs:
  analyze:
    name: Code Analysis
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        language: ["cpp"]

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: ${{ matrix.language }}

      - name: Build
        env:
          TARGET: Debug
          PROCESSOR: x64
        run: |
          sudo apt-get update
          make environment
          make build

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3