@@ -59,13 +59,37 @@ jobs:
5959 id : checkout-repos
6060 run : |
6161 scripts/workflow/checkout_repos.sh
62+ # - name: Setup Bazel
63+ # uses: bazel-contrib/setup-bazel@0.15.0
64+ # with:
65+ # # Avoid downloading Bazel every time.
66+ # bazelisk-cache: true
67+ # # Store build cache per workflow.
68+ # disk-cache: codeql-scan
69+ # # Share repository cache between workflows.
70+ # repository-cache: true
6271 - name : Initialize CodeQL for all repositories
6372 uses : github/codeql-action/init@v4
6473 with :
6574 languages : cpp
6675 build-mode : none
67- packs : codeql/misra-cpp-coding-standards
76+ packs : codeql/misra-cpp-coding-standards@2.53.0
6877 config-file : ./.github/codeql/codeql-config.yml
78+ # - name: Build all components with Bazel
79+ # run: |
80+ # echo "Building all C++ and Rust targets for CodeQL analysis"
81+ # # Build all targets from the checked-out repositories
82+ # # This ensures CodeQL captures the compilation database
83+ # bazel build --verbose_failures --config=x86_64-linux \
84+ # @score_baselibs//... \
85+ # @score_baselibs_rust//src/... \
86+ # @score_communication//score/mw/com/impl/... \
87+ # @score_persistency//src/... \
88+ # @score_orchestrator//src/... \
89+ # @score_kyron//src/... \
90+ # @score_lifecycle_health//src/... \
91+ # @score_logging//... \
92+ # || true # Continue even if some targets fail
6993 - name : Perform CodeQL Analysis
7094 uses : github/codeql-action/analyze@v4
7195 with :
0 commit comments