Create codeql.yml to enable CodeQL C++ scanning (#382)

.github/actions/build_toplevel/action.yml

@@ -21,6 +21,9 @@ inputs:
     description: "Kind of package to build"
   coverage:
     description: "Whether to run coverage"
+  upload_artifacts:
+    description: "Whether to upload artifacts"
+    default: 'true'
   upload_release_assets:
     default: 'false'
     description: "Whether to attempt uploading assets to a tag release."
@@ -128,25 +131,25 @@ runs:
       echo "=========================================="
       printf "\n\n\n\n\n\n"
   - name: Upload wheel (${{ inputs.variant_name }})
-    if: ${{ !env.ACT }}
+    if: ${{ inputs.upload_artifacts == 'true' }}
     uses: actions/upload-artifact@v4
     with:
       name: wheel_${{ inputs.name }}
       path: ${{ steps.find.outputs.name }}
   - name: Upload debug info (${{ inputs.variant_name }})
-    if: ${{ !env.ACT }}
+    if: ${{ inputs.upload_artifacts == 'true' }}
     uses: actions/upload-artifact@v4
     with:
       name: breakpad_debuginfo_${{ inputs.name }}
       path: debuginfo
   - name: Upload PyInstaller (${{ inputs.variant_name }})
-    if: ${{ inputs.pyinstaller }}
+    if: ${{ inputs.pyinstaller && inputs.upload_artifacts == 'true' }}
     uses: actions/upload-artifact@v4
     with:
       name: pyinstaller_${{ inputs.name }}
       path: ${{ steps.pyinstaller.outputs.distribution }}
   - name: Upload MacOS app bundle
-    if: ${{ inputs.appbundle }}
+    if: ${{ inputs.appbundle && inputs.upload_artifacts == 'true' }}
     uses: actions/upload-artifact@v4
     with:
       name: appbundle_${{ inputs.name }}
@@ -157,15 +160,15 @@ runs:
     run: |
       echo "$(realpath build/cp*/)" | tee ori_build_dir.txt
   - name: Upload info context for coverage analysis
-    if: ${{ inputs.coverage }}
+    if: ${{ inputs.coverage && inputs.upload_artifacts == 'true' }}
     uses: actions/upload-artifact@v4
     with:
       name: coverage_context
       path: |
         ./**/*.gcno
         ori_build_dir.txt
   - name: Upload .PDB files
-    if: ${{ inputs.prepare_kind == 'windows' }}
+    if: ${{ inputs.prepare_kind == 'windows' && inputs.upload_artifacts == 'true' }}
     uses: actions/upload-artifact@v4
     with:
       name: pdb_${{ inputs.name }}

.github/actions/prepare_build/action.yml

@@ -18,6 +18,9 @@ runs:
   - name: Prepare linux
     if: ${{ inputs.variant == 'linux' }}
     uses: ./.github/actions/prepare_build_linux
+  - name: Prepare ubuntu-latest
+    if: ${{ inputs.variant == 'ubuntu_latest' }}
+    uses: ./.github/actions/prepare_build_ubuntu_latest
   - name: Prepare MacOS
     if: ${{ inputs.variant == 'macos' }}
     uses: ./.github/actions/prepare_build_macos

.github/actions/prepare_build_ubuntu_latest/action.yml

@@ -0,0 +1,12 @@
+name: prepare_build_ubuntu_latest
+description: Prepare ubuntu-latest for building Shoopdaloop wheels
+
+runs:
+  using: "composite"
+  steps:
+  - name: Install dependencies
+    shell: bash
+    run: |
+       sudo DEBIAN_FRONTEND=noninteractive apt-get update
+       sudo DEBIAN_FRONTEND=noninteractive apt-get -y install $(distribution/dependencies/get_dependencies.sh build_base_ubuntu_latest)
+       PIP_BREAK_SYSTEM_PACKAGES=1 sudo python3 -m pip install --upgrade pip build auditwheel patchelf