From 5022fd30e1a922ad7f2dfc81648d3c73c5f2aa22 Mon Sep 17 00:00:00 2001 From: Eli Schwartz Date: Fri, 25 Nov 2022 01:05:56 -0500 Subject: Add github's CodeQL scanner to CI. lgtm.com was acquired by github. It is deprecated and on its way out, because they've integrated the functionality itself into github. Take a look at what its official replacement can do. This does run as yet another Actions slot, which is already fairly excessive, but the average runtime seems about 5 minutes so that's not too bad... --- .github/codeql/codeql-config.yml | 5 +++++ .github/codeql/lgtm.qls | 4 ++++ 2 files changed, 9 insertions(+) create mode 100644 .github/codeql/codeql-config.yml create mode 100644 .github/codeql/lgtm.qls (limited to '.github/codeql') diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml new file mode 100644 index 000000000..9b144885f --- /dev/null +++ b/.github/codeql/codeql-config.yml @@ -0,0 +1,5 @@ +queries: + - uses: ./.github/codeql/lgtm.qls + +paths-ignore: + - 'test cases' diff --git a/.github/codeql/lgtm.qls b/.github/codeql/lgtm.qls new file mode 100644 index 000000000..9befc76ea --- /dev/null +++ b/.github/codeql/lgtm.qls @@ -0,0 +1,4 @@ +# for some reason this doesn't work by default any way I can see + +- import: codeql-suites/python-lgtm.qls + from: codeql/python-queries -- cgit v1.2.3