Merge pull request #282 from python-greenlet/codeql

Enable GitHub CodeQL scanning

.github/workflows/tests.yml

@@ -119,6 +119,47 @@ jobs:
         python -c 'import greenlet._greenlet as G; assert not G.GREENLET_USE_STANDARD_THREADING'
         python -m unittest discover -v greenlet.tests
 
+  CodeQL:
+    runs-on: ubuntu-latest
+    permissions:
+      # required for all workflows
+      security-events: write
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up Python
+        uses: actions/setup-python@v2
+        with:
+          python-version: "3.10"
+      - name: Pip cache
+        uses: actions/cache@v2
+        with:
+          path: ~/.cache/pip
+          key: ${{ runner.os }}-pip-ql-${{ hashFiles('setup.*') }}
+          restore-keys: |
+            ${{ runner.os }}-pip-ql-
+      - name: Install dependencies
+        run: |
+          python -m pip install -U pip
+          python -m pip install -U setuptools wheel
+          # Set the `CODEQL-PYTHON` environment variable to the Python executable
+          # that includes the dependencies
+          echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v1
+        with:
+          languages: python, cpp
+          # Override the default behavior so that the action doesn't attempt
+          # to auto-install Python dependencies
+          setup-python-dependencies: false
+      - name: Install greenlet
+        run: |
+          python setup.py build
+      # - name: Autobuild
+      #   uses: github/codeql-action/autobuild@v1
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v1
+
   manylinux:
 
     runs-on: ubuntu-latest