diff --git a/.github/codeql/cpp.yml b/.github/codeql/cpp.yml new file mode 100644 index 0000000000..6244ba707d --- /dev/null +++ b/.github/codeql/cpp.yml @@ -0,0 +1,4 @@ +paths: + - src + - lib + - tools diff --git a/.github/codeql/python.yml b/.github/codeql/python.yml new file mode 100644 index 0000000000..c02a54e3ea --- /dev/null +++ b/.github/codeql/python.yml @@ -0,0 +1,5 @@ +paths: + - python/lammps + +queries: + - uses: security-and-quality diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 827306c9aa..064ba6c652 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -31,16 +31,18 @@ jobs: uses: github/codeql-action/init@v1 with: languages: ${{ matrix.language }} + config-file: ./.github/codeql/${{ matrix.language }}.yml - name: Create Build Environment - run: cmake -E make_directory ${{github.workspace}}/build + if: ${{ matrix.language == 'cpp' }} + run: mkdir build - name: Building LAMMPS via CMake if: ${{ matrix.language == 'cpp' }} shell: bash - working-directory: ${{github.workspace}}/build + working-directory: build run: | - cmake -C $GITHUB_WORKSPACE/cmake/presets/most.cmake $GITHUB_WORKSPACE/cmake + cmake -C ../cmake/presets/most.cmake ../cmake cmake --build . --parallel 2 - name: Perform CodeQL Analysis