Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CodeQL #1

Merged
Merged

Conversation

szlatkow
Copy link

No description provided.

id: init_codeql
uses: github/codeql-action/init@v1
# with:
# queries: security-and-quality

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why leave this code commented ?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was working on the building process and by mistake i left it commented.

uses: actions/cache@v1.1.2
with:
path: Build/WinMergeDownloadDeps
key: WinMergeDownloadDeps

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. Why is this step required for the CQL pipeline ?
  2. The name is not good enough.
  3. What is "chache" ?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actions/cache action allows caching dependencies and build outputs to improve workflow execution time.

id: build
run: |
.\DownloadDeps.cmd
.\BuildAll.vs2019.cmd x64 -ci

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Name and ID are not good enough. Should've checked out the names and IDs of the other steps, to use them as examples.


jobs:
analyze:
name: CodeQL Analysis

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Change the name of the job from "CodeQL Analysis" to "Analyze".
Change it in your template as well and I will in mine, too.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Okay

jobs:
analyze:
name: Analyze
runs-on: windows-latest
Copy link

@aleks-ivanov aleks-ivanov Apr 23, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why windows not ubuntu ?
Also you haven't resolved the last changes request.

Copy link
Author

@szlatkow szlatkow Apr 28, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@aleks-ivanov
I am using windows because the .cmd file cannot be built on ubuntu.
Resolved the last requested changes.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alright

jobs:
analyze:
name: Analyze
runs-on: windows-latest

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alright

@aleks-ivanov aleks-ivanov merged commit 862713e into pipeline-foundation:feature/codeql Apr 28, 2021
@szlatkow szlatkow deleted the feature/codeql branch April 28, 2021 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants