mirror of
https://github.com/hathach/tinyusb.git
synced 2026-02-05 06:45:44 +00:00
download ninja binary, apt seems take too long ~ 1 min
also upload sarif as artifacts
This commit is contained in:
25
.github/workflows/static_analysis.yml
vendored
25
.github/workflows/static_analysis.yml
vendored
@ -50,7 +50,7 @@ jobs:
|
||||
with:
|
||||
category: CodeQL
|
||||
upload: always
|
||||
id: step1
|
||||
id: analyze
|
||||
|
||||
# - name: Filter out unwanted errors and warnings
|
||||
# uses: advanced-security/filter-sarif@v1
|
||||
@ -71,15 +71,21 @@ jobs:
|
||||
# -**/third*party/**
|
||||
# -**/3rd*party/**
|
||||
# -**/external/**
|
||||
# input: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif
|
||||
# output: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif
|
||||
# input: ${{ steps.analyze.outputs.sarif-output }}/cpp.sarif
|
||||
# output: ${{ steps.analyze.outputs.sarif-output }}/cpp.sarif
|
||||
#
|
||||
# - name: Upload SARIF
|
||||
# uses: github/codeql-action/upload-sarif@v4
|
||||
# with:
|
||||
# sarif_file: ${{ steps.step1.outputs.sarif-output }}
|
||||
# sarif_file: ${{ steps.analyze.outputs.sarif-output }}
|
||||
# category: CodeQL
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v5
|
||||
with:
|
||||
name: codeql-${{ matrix.board }}
|
||||
path: ${{ steps.analyze.outputs.sarif-output }}
|
||||
|
||||
PVS-Studio:
|
||||
runs-on: ubuntu-latest
|
||||
strategy:
|
||||
@ -114,14 +120,21 @@ jobs:
|
||||
cmake examples -B build -G Ninja -DBOARD=${{ matrix.board }} -DCMAKE_EXPORT_COMPILE_COMMANDS=ON -DCMAKE_BUILD_TYPE=MinSizeRel
|
||||
cmake --build build
|
||||
pvs-studio-analyzer analyze -f build/compile_commands.json -j --exclude-path hw/mcu/ --exclude-path lib/
|
||||
plog-converter -t sarif -o pvs.sarif PVS-Studio.log
|
||||
plog-converter -t sarif -o pvs-${{ matrix.board }}.sarif PVS-Studio.log
|
||||
|
||||
- name: Upload SARIF
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
with:
|
||||
sarif_file: pvs.sarif
|
||||
sarif_file: pvs-${{ matrix.board }}.sarif
|
||||
category: PVS-Studio
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v5
|
||||
with:
|
||||
name: pvs-${{ matrix.board }}
|
||||
path: pvs-${{ matrix.board }}.sarif
|
||||
|
||||
|
||||
# SonarQube:
|
||||
# name: Build and analyze
|
||||
# runs-on: ubuntu-latest
|
||||
|
||||
Reference in New Issue
Block a user