Add sast to project

.github/workflows/static.yml

@@ -35,8 +35,11 @@ jobs:
         uses: actions/configure-pages@v5
 
       - name: Install packages
-        run: sudo apt-get update && sudo apt-get upgrade && sudo DEBIAN_FRONTEND=noninteractive TZ=Etc/UTC apt-get -y install doxygen graphviz lcov cmake
+        run: sudo apt-get update && sudo apt-get upgrade && sudo DEBIAN_FRONTEND=noninteractive TZ=Etc/UTC apt-get -y install doxygen graphviz lcov cmake pipx clang clang-tidy
 
+      - name: Install CodeChecker
+        run: sudo pipx install CodeChecker --force
+
       - name: Create documentation
         run: ./Docs/Gendoc.sh
 
@@ -49,12 +52,21 @@ jobs:
       - name: Move coverage artifact
         run: mv ./Coverage ./Docs/Generated/html
 
+      - name: Run sast
+        run: ./Scripts/RunSast.sh
+
+      - name: Move sast artifacts
+        run: |
+          mv ./Sast/html_clang_tidy ./Docs/Generated/html
+          mv ./Sast/html_clangsa ./Docs/Generated/html
+          mv ./Sast/html_cppcheck ./Docs/Generated/html 
+
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v3
         with:
           # Upload documentation
           path: './Docs/Generated/html/'
-          
+
       - name: Deploy to GitHub Pages
         id: deployment
         uses: actions/deploy-pages@v4

.gitignore

@@ -3,4 +3,5 @@ Docs/Generated
 Docs/Examples
 Build
 Release
-Coverage
+Coverage
+Sast

ReadMe.md

@@ -1,5 +1,9 @@
 Full documentation available [here](https://mrognor.github.io/MVault/index.html)  
 Test coverage available [here](https://mrognor.github.io/MVault/Coverage/CodeCoverage.html)
+Sast clang_tidy available [here](https://mrognor.github.io/MVault/html_clang_tidy/index.html#sort=file-path&asc=1)
+Sast clangsa available [here](https://mrognor.github.io/MVault/html_clangsa/index.html#sort=file-path&asc=1)
+Sast cppcheck available [here](https://mrognor.github.io/MVault/cppcheck/index.html#sort=file-path&asc=1)
+
 
 # Configure project
 Cmake is used to configure the project. It is called via the **Configure** script. 

Scripts/Clean.sh

@@ -4,6 +4,7 @@ cd ..
 
 rm -rf Build
 rm -rf Coverage
+rm -rf Sast
 rm -rf Release
 rm -rf Docs/Examples
 rm -rf Docs/Generated

Scripts/RunSast.sh

@@ -0,0 +1,20 @@
+# Navigate to root dir
+cd $(dirname "$0")
+cd ..
+
+# Navigate to sast dir
+mkdir -p Sast
+cd Sast
+
+cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=1 ../Source/
+
+CodeChecker analyze ./compile_commands.json --analyzers clangsa --enable=sensitive --output clangsa
+CodeChecker parse --export html --output ./html_clangsa ./clangsa
+
+CodeChecker analyze ./compile_commands.json --analyzers cppcheck --enable=sensitive --output cppcheck
+CodeChecker parse --export html --output ./html_cppcheck ./cppcheck
+
+CodeChecker analyze ./compile_commands.json --analyzers clang-tidy --enable=sensitive --output clang-tidy
+CodeChecker parse --export html --output ./html_clang_tidy ./clang-tidy
+
+echo "Finish sast"