Skip to content

Run CodeQL

Run CodeQL #717

name: "Run CodeQL"
on:
push:
branches:
- 'main'
- 'develop'
- 'release/*'
pull_request:
# The branches below must be a subset of the branches above
branches:
- 'main'
- 'develop'
- 'release/*'
schedule:
- cron: '34 2 * * 0'
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
env:
destination: "platform=iOS Simulator,name=iPhone 15 Pro,OS=latest"
configuration: "Debug"
noIndex: "COMPILER_INDEX_STORE_ENABLE=NO"
noSigning: "CODE_SIGNING_ALLOWED=NO"
versionXcode: "15.2"
jobs:
analyze:
name: Analyze
runs-on: [ macos-13-large ]
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'swift' ]
steps:
- name: Checkout repository
uses: actions/checkout@v3
with:
submodules: recursive
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
queries: security-and-quality
- name: Select Xcode
run: |
sudo xcode-select -switch /Applications/Xcode_${versionXcode}.app
- name: Log xcodebuild Version
run: |
xcodebuild -version
- name: Build Frames
run: |
xcodebuild -scheme Frames -destination "${destination}" "${noIndex}" "${noSigning}" | xcpretty
- name: Build CheckoutTests
run: |
xcodebuild build -scheme CheckoutTests -destination "${destination}" "${noIndex}" "${noSigning}" | xcpretty
- name: Build FramesTests
run: |
xcodebuild build -scheme FramesTests -destination "${destination}" "${noIndex}" "${noSigning}" | xcpretty
- name: Build iOS Example Frame SPM
run: |
cd iOS\ Example\ Frame\ SPM
xcodebuild build -scheme iOS\ Example\ Frame -destination "${destination}" "${noIndex}" "${noSigning}" | xcpretty
- name: Build UITest
run: |
cd iOS\ Example\ Frame\ SPM
xcodebuild -scheme UITest -destination "${destination}" "${noIndex}" "${noSigning}" | xcpretty
# Perform analysis on the code
- name: Analyze code with CodeQL
uses: github/codeql-action/analyze@v2