Skip to content

Commit

Permalink
CI: Add CodeQL static analysis
Browse files Browse the repository at this point in the history
LGTM is deprecated and will cease working in Decemeber, per
https://github.blog/2022-08-15-the-next-step-for-lgtm-com-github-code-scanning/

Drop the LGTM badges too, as they will stop working as well.

Signed-off-by: Andrew Cooper <[email protected]>
  • Loading branch information
andyhhp committed Nov 21, 2023
1 parent e56e720 commit 87150e0
Show file tree
Hide file tree
Showing 2 changed files with 32 additions and 3 deletions.
32 changes: 32 additions & 0 deletions .github/workflows/CodeQL.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
name: CodeQL

on:
push:
pull_request:
workflow_dispatch:
schedule:
- cron: '30 12 * * 3' # Weekly, Wed at 12:30 pm

jobs:
CodeQL:

strategy:
matrix:
bits: ['32', '64']
lto: [LTO=y, LTO=n]

runs-on: 'ubuntu-22.04'

steps:
- uses: actions/checkout@v3

- uses: github/codeql-action/init@v2
with:
languages: cpp
queries: security-and-quality

- name: Build
run: |
make BITS=${{matrix.bits}} ${{matrix.lto}}
- uses: github/codeql-action/analyze@v2
3 changes: 0 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,4 @@
TrenchBoot Secure Kernel Loader
===============================

[![Language grade: C/C++](https://img.shields.io/lgtm/grade/cpp/g/TrenchBoot/secure-kernel-loader.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/TrenchBoot/secure-kernel-loader/context:cpp)
[![Total alerts](https://img.shields.io/lgtm/alerts/g/TrenchBoot/secure-kernel-loader.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/TrenchBoot/secure-kernel-loader/alerts/)

Open source implementation of Secure Loader for AMD Secure Startup.

0 comments on commit 87150e0

Please sign in to comment.