codeql.yml

name: "CodeQL"

on: [push, pull_request]

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  analyze-ubuntu:
    name: Analyze on Ubuntu
    runs-on: ubuntu-latest
    permissions:
      security-events: write

    strategy:
      fail-fast: false

    steps:
    - name: Checkout repository
      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

    - name: Initialize CodeQL
      uses: github/codeql-action/init@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2
      with:
        languages: cpp, python

    - name: Install pip packages
      run: pip install -r third_party/requirements.txt

    - name: Configure CMake
      run: cmake -B ${{github.workspace}}/build -DUR_DEVELOPER_MODE=ON -DUR_BUILD_TESTS=ON -DUR_ENABLE_TRACING=ON -DUR_BUILD_TOOLS=ON -DUMF_ENABLE_POOL_TRACKING=ON

    - name: Build
      run: cmake --build ${{github.workspace}}/build -j $(nproc)

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2

  analyze-windows:
    name: Analyze on Windows
    runs-on: windows-latest
    permissions:
      security-events: write

    strategy:
      fail-fast: false

    steps:
    - name: Checkout repository
      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

    - name: Initialize CodeQL
      uses: github/codeql-action/init@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2
      with:
        languages: cpp, python

    - name: Install pip packages
      run: python3 -m pip install -r third_party/requirements.txt

    - name: Configure CMake
      run: cmake -B ${{github.workspace}}/build -DCMAKE_POLICY_DEFAULT_CMP0094=NEW -DUR_DEVELOPER_MODE=ON -DUR_BUILD_TESTS=ON -DUR_ENABLE_TRACING=ON -DUR_BUILD_TOOLS=ON -DUMF_ENABLE_POOL_TRACKING=ON

    - name: Build
      run: cmake --build ${{github.workspace}}/build -j $(nproc) --config Release

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2