FilesExpand file tree

main

/

rust-analysis.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

64 lines (54 loc) · 1.46 KB

main

/

rust-analysis.yml

Copy path

Top

File metadata and controls

• Code
• Blame

64 lines (54 loc) · 1.46 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

name: "Code scanning - Rust"

on:

push:

branches:

- main

- 'rc/*'

pull_request:

branches:

- main

- 'rc/*'

paths:

- '**/*.rs'

- '**/Cargo.toml'

- '.github/codeql/codeql-config.yml'

- '.github/workflows/rust-analysis.yml'

schedule:

- cron: '0 9 * * 1'

env:

CODEQL_ENABLE_EXPERIMENTAL_FEATURES: "true"

jobs:

analyze:

strategy:

matrix:

language: [ 'rust' ]

runs-on: ubuntu-latest

permissions:

contents: read

security-events: write

pull-requests: read

steps:

- name: Checkout repository

uses: actions/checkout@v4

- name: Query latest nightly CodeQL bundle

shell: bash

id: codeql

env:

GITHUB_TOKEN: ${{ github.token }}

run: |

REPO=dsp-testing/codeql-cli-nightlies

TAG=$(

gh release list -R $REPO -L1 --exclude-drafts --json tagName -q ".[] | .tagName"

)

echo "nightly_bundle=https://github.com/$REPO/releases/download/$TAG/codeql-bundle-linux64.tar.zst" \

| tee -a "$GITHUB_OUTPUT"

- name: Initialize CodeQL

uses: github/codeql-action/init@main

with:

tools: ${{ steps.codeql.outputs.nightly_bundle }}

languages: ${{ matrix.language }}

config-file: ./.github/codeql/codeql-config.yml

- name: Autobuild

uses: github/codeql-action/autobuild@main

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@main