1010# supported CodeQL languages.
1111#
1212name : " CodeQL"
13-
1413on :
1514 push :
1615 branches : ["main"]
1716 pull_request :
1817 branches : ["main"]
1918 schedule :
2019 - cron : " 21 18 * * 0"
21-
2220permissions :
2321 contents : read
24-
2522jobs :
2623 analyze :
2724 name : Analyze
@@ -35,24 +32,21 @@ jobs:
3532 permissions :
3633 # required for all workflows
3734 security-events : write
38-
3935 # only required for workflows in private repositories
4036 actions : read
4137 contents : read
42-
4338 strategy :
4439 fail-fast : false
4540 matrix :
46- language : ["c-cpp", "go"]
41+ language : ["c-cpp", "go", "actions" ]
4742 # CodeQL supports [ 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift' ]
4843 # Use only 'java-kotlin' to analyze code written in Java, Kotlin or both
4944 # Use only 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
5045 # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
51-
5246 steps :
5347 - name : Checkout repository
5448 uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
55-
49+ timeout-minutes : 5
5650 # Initializes the CodeQL tools for scanning.
5751
5852 # If you wish to specify custom queries, you can do so here or in a config file.
@@ -75,30 +69,36 @@ jobs:
7569 # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
7670 - name : Set up Ninja
7771 uses : seanmiddleditch/gha-setup-ninja@7e868db0f3406270dd46e1dac26c65f621456723 # master
72+ if : matrix.language != 'c-cpp'
73+ timeout-minutes : 5
7874 - name : Set up Clang
7975 uses : egor-tensin/setup-clang@8092a31dc33b0c41ee7cc5bb81fd0267490a0161 # v2.2
8076 if : matrix.language == 'c-cpp'
77+ timeout-minutes : 5
8178 with :
8279 version : latest
8380 platform : x64
8481 - name : Install libc++-dev and libc++abi-dev
82+ timeout-minutes : 5
8583 run : sudo apt-get install libc++-dev libc++abi-dev -y
8684 - name : Initialize CodeQL
8785 uses : github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
86+ timeout-minutes : 5
8887 with :
8988 languages : ${{ matrix.language }}
9089 debug : true
9190 - name : Build C++ and Go
9291 if : matrix.language == 'c-cpp' || matrix.language == 'go'
92+ timeout-minutes : 5
9393 run : |
9494 env | grep -E "CODEQL|LD_PRELOAD|CC|CXX"
9595 export FUTILS_CXX_COMPILER=$CXX
9696 export FUTILS_C_COMPILER=$CC
9797 ldd $(which clang)
9898 FUTILS_DIR=./utils python build.py native
9999 ./tool/src2json --version
100-
101100 - name : Perform CodeQL Analysis
102101 uses : github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
102+ timeout-minutes : 5
103103 with :
104104 category : " /language:${{matrix.language}}"
0 commit comments