codeql.yml

name: 👾 Code Scan

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_call:
  schedule:
    - cron: "15 21 * * 6"
  workflow_dispatch:

jobs:
  codeql:
    name: 🏭 Scanning
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write
    steps:
      - name: ⤵️ Check out code from GitHub
        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
      - name: 🏗 Initialize CodeQL
        uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
      - run: |
          INSTALL_PATH="/usr/local"
          export PATH=$INSTALL_PATH/bin:"$PATH"
          export LD_LIBRARY_PATH=$INSTALL_PATH/lib:"$LD_LIBRARY_PATH"
          export CFLAGS=-I$INSTALL_PATH/include
          export CPPFLAGS="-I$INSTALL_PATH/include" LDFLAGS="-L$INSTALL_PATH/lib"
          CFLAGS="-g -Wall -O3" ./configure --disable-gdbm --without-tcsetpgrp --quiet
          make
      - name: 🚀 Perform CodeQL Analysis
        uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff