Merge pull request #211 from evelikov/codeql-tidy

ci: codeql ignore meson generated files, et al
gregkh · Nov 16, 2024 · 79a0b23 · 79a0b23
2 parents 807d0cc + e928220
commit 79a0b23
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 3 deletions.
diff --git a/.github/actions/setup-debian/action.yml b/.github/actions/setup-debian/action.yml
@@ -11,6 +11,8 @@ runs:
     - name: Install dependencies
       shell: bash
       run: |
+        export DEBIAN_FRONTEND=noninteractive
+        export TZ=Etc/UTC
         dpkg --add-architecture i386
         apt-get update
         apt-get install --yes \

diff --git a/.github/actions/setup-ubuntu/action.yml b/.github/actions/setup-ubuntu/action.yml
@@ -11,6 +11,8 @@ runs:
     - name: Install dependencies
       shell: bash
       run: |
+        export DEBIAN_FRONTEND=noninteractive
+        export TZ=Etc/UTC
         dpkg --add-architecture i386
         apt-get update
         apt-get install --yes \

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -59,11 +59,26 @@ jobs:
 
       - name: Build
         run: |
-          mkdir build && cd build
-          meson setup --native-file ../build-dev.ini . ..
-          meson compile
+          meson setup --native-file build-dev.ini build
+          meson compile -C build
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
         with:
           category: "/language:cpp"
+          upload: false
+          output: sarif-results
+
+      - name: Filter out meson-internal test files
+        uses: advanced-security/filter-sarif@f3b8118a9349d88f7b1c0c488476411145b6270d # v1.0.1
+        with:
+          patterns: |
+            -build/meson-private/**/testfile.c
+          input: sarif-results/cpp.sarif
+          output: sarif-results/cpp.sarif
+
+      - name: Upload CodeQL results to code scanning
+        uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        with:
+          sarif_file: sarif-results/cpp.sarif
+          category: "/language:cpp"