Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: codeql ignore meson generated files, et al #211

Merged
merged 3 commits into from
Nov 16, 2024

Commits on Nov 16, 2024

  1. ci: Fix debian/ubuntu installation

    Make sure we are running in non-interactive mode and that we don't get
    blocked on tzdata update.
    
    Signed-off-by: Lucas De Marchi <[email protected]>
    [Emil: port from kmod]
    Signed-off-by: Emil Velikov <[email protected]>
    lucasdemarchi authored and evelikov committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    a25e931 View commit details
    Browse the repository at this point in the history
  2. ci: stop manually creating build/

    There's no need to manually create and cd into the build directory,
    since meson knows how to handle that.
    
    Signed-off-by: Emil Velikov <[email protected]>
    evelikov committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    2c488b6 View commit details
    Browse the repository at this point in the history
  3. ci/codeql: use filter-sarif to filter meson-private

    There is a severe number of false-positive in code scanning caused by
    inspecting meson-internal test files like
    'build/meson-private/tmpzb46osmq/testfile.c'.
    
    As a workaround, use the 'filter-sarif' action to filter out these
    results before uploading the SARIF (Static Analysis Results Interchange
    Format).
    
    This PR was inspired by rauc/rauc#1346 and the
    example from https://github.com/advanced-security/filter-sarif.
    
    Signed-off-by: Enrico Joerns <[email protected]>
    [Emil: port from rauc, use checksums for actions]
    Signed-off-by: Emil Velikov <[email protected]>
    ejoerns authored and evelikov committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    e928220 View commit details
    Browse the repository at this point in the history