diff --git a/.github/workflows/codeql_checks.yml b/.github/workflows/codeql_checks.yml index 2494182..7168370 100644 --- a/.github/workflows/codeql_checks.yml +++ b/.github/workflows/codeql_checks.yml @@ -18,23 +18,56 @@ jobs: name: Analyse strategy: matrix: - sdk: [ "$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK" ] + sdk: [ "$NANOSP_SDK" ] #'cpp' covers C and C++ language: [ 'cpp' ] runs-on: ubuntu-latest container: - image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-legacy:latest + image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-lite:latest steps: - name: Clone uses: actions/checkout@v3 + #- name: Explore + # run: | + # apk add tree + # tree / > /tmp/tree.txt + + #- name: Upload tree + # uses: actions/upload-artifact@v3 + # with: + # name: tree + # path: /tmp/tree.txt + + #- name: Create volume archive + # run: | + # tar cvzf /tmp/volume.tar.gz /__t + + #- name: Upload volume + # uses: actions/upload-artifact@v3 + # with: + # name: volume + # path: /tmp/volume.tar.gz + + - name: Install JRE + run: | + apk add openjdk17-jre-headless + - name: Initialize CodeQL + env: + CODEQL_JAVA_HOME: /usr/lib/jvm/java-17-openjdk uses: github/codeql-action/init@v2 with: languages: ${{ matrix.language }} queries: security-and-quality + - name: Install glibc compatibility layer + run: | + echo $LD_PRELOAD + apk add gcompat + env + # CodeQL will create the database during the compilation - name: Build run: |