CodeQL #19

	name: "CodeQL"

	on:
	workflow_dispatch:
	push:
	branches:
	- master
	- main
	- develop
	pull_request:
	# Excluded path: add the paths you want to ignore instead of deleting the workflow
	paths-ignore:
	- '.github/workflows/*.yml'
	- 'tests/*'

	jobs:
	analyse:
	name: Analyse
	strategy:
	matrix:
	sdk: [ "$NANOSP_SDK" ]
	#'cpp' covers C and C++
	language: [ 'cpp' ]
	runs-on: ubuntu-latest
	env:
	CODEQL_JAVA_HOME: /usr/lib/jvm/java-17-openjdk
	container:
	image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-lite:latest

	steps:
	- name: Clone
	uses: actions/checkout@v3

	- name: Install JRE
	run: \|
	apk add openjdk17-jre-headless

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v2
	with:
	languages: ${{ matrix.language }}
	queries: security-and-quality

	#- name: Install glibc compatibility layer
	# run: \|
	# echo $LD_PRELOAD
	# apk add gcompat
	# env

	- name: Get pre logs
	uses: actions/upload-artifact@v3
	with:
	name: pre-logs
	path: /__w/_temp/

	# CodeQL will create the database during the compilation
	- name: Build
	run: \|
	make BOLOS_SDK=${{ matrix.sdk }}

	#- name: git status
	# run: \|
	# git status

	- name: Get post logs
	uses: actions/upload-artifact@v3
	with:
	name: post-logs
	path: /__w/_temp/

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v2

Provide feedback