mirror of
https://github.com/raysan5/raylib.git
synced 2025-10-10 11:56:27 +00:00
Update analyze_codeql.yml
This commit is contained in:
8
.github/workflows/analyze_codeql.yml
vendored
8
.github/workflows/analyze_codeql.yml
vendored
@@ -71,7 +71,7 @@ jobs:
|
|||||||
|
|
||||||
# Initializes the CodeQL tools for scanning.
|
# Initializes the CodeQL tools for scanning.
|
||||||
- name: Initialize CodeQL
|
- name: Initialize CodeQL
|
||||||
uses: github/codeql-action/init@v2
|
uses: github/codeql-action/init@v3
|
||||||
with:
|
with:
|
||||||
languages: ${{ matrix.language }}
|
languages: ${{ matrix.language }}
|
||||||
# If you wish to specify custom queries, you can do so here or in a config file.
|
# If you wish to specify custom queries, you can do so here or in a config file.
|
||||||
@@ -90,7 +90,7 @@ jobs:
|
|||||||
cmake --build . --config $BUILD_TYPE
|
cmake --build . --config $BUILD_TYPE
|
||||||
|
|
||||||
- name: Perform CodeQL Analysis
|
- name: Perform CodeQL Analysis
|
||||||
uses: github/codeql-action/analyze@v2
|
uses: github/codeql-action/analyze@v3
|
||||||
with:
|
with:
|
||||||
category: "/language:${{matrix.language}}"
|
category: "/language:${{matrix.language}}"
|
||||||
upload: false
|
upload: false
|
||||||
@@ -99,7 +99,7 @@ jobs:
|
|||||||
# Filter out rules with low severity or high false positve rate
|
# Filter out rules with low severity or high false positve rate
|
||||||
# Also filter out warnings in third-party code
|
# Also filter out warnings in third-party code
|
||||||
- name: Filter out unwanted errors and warnings
|
- name: Filter out unwanted errors and warnings
|
||||||
uses: advanced-security/filter-sarif@v1
|
uses: advanced-security/filter-sarif@v3
|
||||||
with:
|
with:
|
||||||
patterns: |
|
patterns: |
|
||||||
-**:cpp/path-injection
|
-**:cpp/path-injection
|
||||||
@@ -121,7 +121,7 @@ jobs:
|
|||||||
output: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif
|
output: ${{ steps.step1.outputs.sarif-output }}/cpp.sarif
|
||||||
|
|
||||||
- name: Upload CodeQL results to code scanning
|
- name: Upload CodeQL results to code scanning
|
||||||
uses: github/codeql-action/upload-sarif@v2
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
with:
|
with:
|
||||||
sarif_file: ${{ steps.step1.outputs.sarif-output }}
|
sarif_file: ${{ steps.step1.outputs.sarif-output }}
|
||||||
category: "/language:${{matrix.language}}"
|
category: "/language:${{matrix.language}}"
|
||||||
|
Reference in New Issue
Block a user