CodeQL #14

	name: "CodeQL"

	on:
	push:
	branches: [ master ]
	paths-ignore:
	- "doc/**"
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [ master ]
	paths-ignore:
	- "doc/**"
	schedule:
	- cron: '18 21 * * 1'

	permissions: read-all

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	analyze:
	name: Analyze
	runs-on: ubuntu-latest
	continue-on-error: true
	permissions:
	actions: read
	contents: read
	security-events: write


	strategy:
	fail-fast: false
	matrix:
	language: [ 'cpp', 'python' ]
	# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
	steps:
	- name: Checkout repository
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11

	# Initializes the CodeQL tools for scanning.
	- name: Initialize CodeQL
	uses: github/codeql-action/[email protected]
	with:
	languages: ${{ matrix.language }}
	queries: security-extended

	- run: \|
	sudo apt-get update
	sudo apt-get install libyaml-dev
	sudo apt-get install libssl-dev
	sudo apt-get install libpcre2-dev
	sudo apt-get install libjansson-dev
	sudo apt-get install libpcap-dev
	sudo apt-get install libnuma-dev
	git clone --depth 1 https://github.com/OISF/libhtp.git
	cargo install cbindgen
	export PATH=/opt/work/.cargo/bin:$PATH
	chmod +x autogen.sh
	./autogen.sh
	./configure
	make
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/[email protected]

Provide feedback