Skip to content

Commit adc4f2f

Browse files
rjbrown6rjbrown6
committed
[#291] CodeQL YML Refactor
1 parent d5a86ae commit adc4f2f

File tree

1 file changed

+158
-158
lines changed

1 file changed

+158
-158
lines changed

‎.github/workflows/codeql.yml

Lines changed: 158 additions & 158 deletions
Original file line numberDiff line numberDiff line change
@@ -64,164 +64,164 @@ jobs:
6464
run: |
6565
bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING
6666
67-
analyze:
68-
name: Analyze Build_Minimal
69-
runs-on: ubuntu-latest
70-
permissions:
71-
# required for all workflows
72-
security-events: write
73-
74-
# required to fetch internal or private CodeQL packs
75-
packages: read
76-
77-
# only required for workflows in private repositories
78-
actions: read
79-
contents: read
80-
81-
env:
82-
BUILD_STRING: build_minimal.sh
83-
84-
strategy:
85-
fail-fast: false
86-
matrix:
87-
include:
88-
- language: c-cpp
89-
build-mode: manual
90-
# - language: python
91-
# build-mode: none
92-
steps:
93-
- name: Checkout repository
94-
uses: actions/checkout@v4
95-
96-
- name: Update Dependencies
97-
run: |
98-
bash ${GITHUB_WORKSPACE}/support/scripts/update_env.sh
99-
100-
# Initializes the CodeQL tools for scanning.
101-
- name: Initialize CodeQL
102-
uses: github/codeql-action/init@v3
103-
with:
104-
languages: ${{ matrix.language }}
105-
build-mode: ${{ matrix.build-mode }}
106-
107-
- if: matrix.build-mode == 'manual'
108-
shell: bash
109-
run: |
110-
bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING
111-
112-
analyze:
113-
name: Analyze Build_Wolf
114-
runs-on: ubuntu-latest
115-
permissions:
116-
# required for all workflows
117-
security-events: write
118-
119-
# required to fetch internal or private CodeQL packs
120-
packages: read
121-
122-
# only required for workflows in private repositories
123-
actions: read
124-
contents: read
125-
126-
env:
127-
BUILD_STRING: build_wolf.sh
128-
129-
strategy:
130-
fail-fast: false
131-
matrix:
132-
include:
133-
- language: c-cpp
134-
build-mode: manual
135-
# - language: python
136-
# build-mode: none
67+
# analyze:
68+
# name: Analyze Build_Minimal
69+
# runs-on: ubuntu-latest
70+
# permissions:
71+
# # required for all workflows
72+
# security-events: write
73+
74+
# # required to fetch internal or private CodeQL packs
75+
# packages: read
76+
77+
# # only required for workflows in private repositories
78+
# actions: read
79+
# contents: read
80+
81+
# env:
82+
# BUILD_STRING: build_minimal.sh
83+
84+
# strategy:
85+
# fail-fast: false
86+
# matrix:
87+
# include:
88+
# - language: c-cpp
89+
# build-mode: manual
90+
# # - language: python
91+
# # build-mode: none
92+
# steps:
93+
# - name: Checkout repository
94+
# uses: actions/checkout@v4
95+
96+
# - name: Update Dependencies
97+
# run: |
98+
# bash ${GITHUB_WORKSPACE}/support/scripts/update_env.sh
99+
100+
# # Initializes the CodeQL tools for scanning.
101+
# - name: Initialize CodeQL
102+
# uses: github/codeql-action/init@v3
103+
# with:
104+
# languages: ${{ matrix.language }}
105+
# build-mode: ${{ matrix.build-mode }}
106+
107+
# - if: matrix.build-mode == 'manual'
108+
# shell: bash
109+
# run: |
110+
# bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING
111+
112+
# analyze:
113+
# name: Analyze Build_Wolf
114+
# runs-on: ubuntu-latest
115+
# permissions:
116+
# # required for all workflows
117+
# security-events: write
118+
119+
# # required to fetch internal or private CodeQL packs
120+
# packages: read
121+
122+
# # only required for workflows in private repositories
123+
# actions: read
124+
# contents: read
125+
126+
# env:
127+
# BUILD_STRING: build_wolf.sh
128+
129+
# strategy:
130+
# fail-fast: false
131+
# matrix:
132+
# include:
133+
# - language: c-cpp
134+
# build-mode: manual
135+
# # - language: python
136+
# # build-mode: none
137137

138-
steps:
139-
- name: Clone WolfSSL
140-
run: git clone --depth 1 --branch v5.6.0-stable https://github.com/wolfSSL/wolfssl.git /tmp/wolfssl
138+
# steps:
139+
# - name: Clone WolfSSL
140+
# run: git clone --depth 1 --branch v5.6.0-stable https://github.com/wolfSSL/wolfssl.git /tmp/wolfssl
141141

142-
- name: Build WolfSSL
143-
run: mkdir /tmp/wolfssl/build;
144-
cd /tmp/wolfssl/build;
145-
cmake -DWOLFSSL_AESCCM=yes -DWOLFSSL_AESSIV=yes -DWOLFSSL_CMAC=yes ..;
146-
cmake --build .;
147-
sudo make install;
148-
sudo ldconfig;
149-
- name: Install Dependencies
150-
run: sudo apt-get install -y lcov libcurl4-openssl-dev libmariadb-dev libmariadb-dev-compat python3 autoconf libtool
151-
152-
- name: Install Python Libraries
153-
run: sudo pip install pycryptodome
154-
155-
- name: Update Dependencies
156-
run: >
157-
curl -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 -o /tmp/libgpg-error-1.50.tar.bz2
158-
&& tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/
159-
&& cd /tmp/libgpg-error-1.50
160-
&& sudo ./configure
161-
&& sudo make install
162-
&& curl -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 -o /tmp/libgcrypt-1.11.0.tar.bz2
163-
&& tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/
164-
&& cd /tmp/libgcrypt-1.11.0
165-
&& sudo ./configure
166-
&& sudo make install
167-
&& sudo ldconfig
142+
# - name: Build WolfSSL
143+
# run: mkdir /tmp/wolfssl/build;
144+
# cd /tmp/wolfssl/build;
145+
# cmake -DWOLFSSL_AESCCM=yes -DWOLFSSL_AESSIV=yes -DWOLFSSL_CMAC=yes ..;
146+
# cmake --build .;
147+
# sudo make install;
148+
# sudo ldconfig;
149+
# - name: Install Dependencies
150+
# run: sudo apt-get install -y lcov libcurl4-openssl-dev libmariadb-dev libmariadb-dev-compat python3 autoconf libtool
151+
152+
# - name: Install Python Libraries
153+
# run: sudo pip install pycryptodome
154+
155+
# - name: Update Dependencies
156+
# run: >
157+
# curl -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 -o /tmp/libgpg-error-1.50.tar.bz2
158+
# && tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/
159+
# && cd /tmp/libgpg-error-1.50
160+
# && sudo ./configure
161+
# && sudo make install
162+
# && curl -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 -o /tmp/libgcrypt-1.11.0.tar.bz2
163+
# && tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/
164+
# && cd /tmp/libgcrypt-1.11.0
165+
# && sudo ./configure
166+
# && sudo make install
167+
# && sudo ldconfig
168168

169-
- name: Checkout repository
170-
uses: actions/checkout@v4
171-
172-
# Initializes the CodeQL tools for scanning.
173-
- name: Initialize CodeQL
174-
uses: github/codeql-action/init@v3
175-
with:
176-
languages: ${{ matrix.language }}
177-
build-mode: ${{ matrix.build-mode }}
178-
179-
- if: matrix.build-mode == 'manual'
180-
shell: bash
181-
run: |
182-
bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING
183-
184-
analyze:
185-
name: Analyze Build_RHEL
186-
runs-on: ubuntu-latest
187-
permissions:
188-
# required for all workflows
189-
security-events: write
190-
191-
# required to fetch internal or private CodeQL packs
192-
packages: read
193-
194-
# only required for workflows in private repositories
195-
actions: read
196-
contents: read
197-
198-
env:
199-
BUILD_STRING: build_rhel.sh
200-
201-
strategy:
202-
fail-fast: false
203-
matrix:
204-
include:
205-
- language: c-cpp
206-
build-mode: manual
207-
# - language: python
208-
# build-mode: none
209-
steps:
210-
- name: Checkout repository
211-
uses: actions/checkout@v4
212-
213-
- name: Update Dependencies
214-
run: |
215-
bash ${GITHUB_WORKSPACE}/support/scripts/update_env.sh
216-
217-
# Initializes the CodeQL tools for scanning.
218-
- name: Initialize CodeQL
219-
uses: github/codeql-action/init@v3
220-
with:
221-
languages: ${{ matrix.language }}
222-
build-mode: ${{ matrix.build-mode }}
223-
224-
- if: matrix.build-mode == 'manual'
225-
shell: bash
226-
run: |
227-
bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING
169+
# - name: Checkout repository
170+
# uses: actions/checkout@v4
171+
172+
# # Initializes the CodeQL tools for scanning.
173+
# - name: Initialize CodeQL
174+
# uses: github/codeql-action/init@v3
175+
# with:
176+
# languages: ${{ matrix.language }}
177+
# build-mode: ${{ matrix.build-mode }}
178+
179+
# - if: matrix.build-mode == 'manual'
180+
# shell: bash
181+
# run: |
182+
# bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING
183+
184+
# analyze:
185+
# name: Analyze Build_RHEL
186+
# runs-on: ubuntu-latest
187+
# permissions:
188+
# # required for all workflows
189+
# security-events: write
190+
191+
# # required to fetch internal or private CodeQL packs
192+
# packages: read
193+
194+
# # only required for workflows in private repositories
195+
# actions: read
196+
# contents: read
197+
198+
# env:
199+
# BUILD_STRING: build_rhel.sh
200+
201+
# strategy:
202+
# fail-fast: false
203+
# matrix:
204+
# include:
205+
# - language: c-cpp
206+
# build-mode: manual
207+
# # - language: python
208+
# # build-mode: none
209+
# steps:
210+
# - name: Checkout repository
211+
# uses: actions/checkout@v4
212+
213+
# - name: Update Dependencies
214+
# run: |
215+
# bash ${GITHUB_WORKSPACE}/support/scripts/update_env.sh
216+
217+
# # Initializes the CodeQL tools for scanning.
218+
# - name: Initialize CodeQL
219+
# uses: github/codeql-action/init@v3
220+
# with:
221+
# languages: ${{ matrix.language }}
222+
# build-mode: ${{ matrix.build-mode }}
223+
224+
# - if: matrix.build-mode == 'manual'
225+
# shell: bash
226+
# run: |
227+
# bash ${GITHUB_WORKSPACE}/support/scripts/$BUILD_STRING

0 commit comments

Comments
 (0)