codeql-development-toolkit/.github/workflows/validate-codeql-queries-cpp.yml at main · advanced-security/codeql-development-toolkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
name: ⚙️ CodeQL - Validate Queries (cpp)

on:
  push:
    branches:
      - 'main'
  pull_request:
    branches:
      - 'main'
  workflow_dispatch:


jobs:
  create-matrix:
    name: Create CodeQL Test Matrix
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.export-test-matrix.outputs.matrix }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v3


      - name: Install QLT
        id: install-qlt
        uses: ./.github/actions/install-qlt-local
        with:
          qlt-version: 'latest'
          add-to-path: true

      - name: Export test matrix
        id: export-test-matrix
        run: |
          qlt test run get-matrix --os-version ubuntu-latest --base example/


  validate-queries:
    name: Validate Queries
    needs: create-matrix

    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.create-matrix.outputs.matrix) }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3


      - name: Install QLT
        id: install-qlt
        uses: ./.github/actions/install-qlt-local
        with:
          qlt-version: 'latest'
          add-to-path: true


      - name: Install CodeQL
        id: install-codeql
        shell: bash
        run: |
          echo "Installing CodeQL"
          qlt codeql run install --base example/
          echo "-----------------------------"
          echo "CodeQL Home: $QLT_CODEQL_HOME"
          echo "CodeQL Binary: $QLT_CODEQL_PATH"

      - name: Verify Versions of Tooling
        shell: bash
        run: |
          echo -e "Checking CodeQL Version:"
          $QLT_CODEQL_PATH --version

          echo -e "Checking QLT Version:"
          echo "QLT Home: ${{ steps.install-qlt.outputs.qlt-home }}"
          qlt version


      - name: Install QL Packs
        shell: bash
        run: |
          qlt query run install-packs --base example/


      - name: Run validation tests
        shell: bash
        run: >
          qlt validation run check-queries --pretty-print --language cpp --base example/ >> $GITHUB_STEP_SUMMARY

          qlt validation run check-queries --language cpp --base example/