From f5ea2b2cf2d25ea1250ad0ec23b14f099cacf69f Mon Sep 17 00:00:00 2001 From: Piotr Korkus Date: Fri, 20 Mar 2026 09:52:23 +0100 Subject: [PATCH 1/2] test --- .../workflows/codeql-multiple-repo-scan.yml | 26 ++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-multiple-repo-scan.yml b/.github/workflows/codeql-multiple-repo-scan.yml index a22531153b2..403d810094a 100644 --- a/.github/workflows/codeql-multiple-repo-scan.yml +++ b/.github/workflows/codeql-multiple-repo-scan.yml @@ -59,13 +59,37 @@ jobs: id: checkout-repos run: | scripts/workflow/checkout_repos.sh + # - name: Setup Bazel + # uses: bazel-contrib/setup-bazel@0.15.0 + # with: + # # Avoid downloading Bazel every time. + # bazelisk-cache: true + # # Store build cache per workflow. + # disk-cache: codeql-scan + # # Share repository cache between workflows. + # repository-cache: true - name: Initialize CodeQL for all repositories uses: github/codeql-action/init@v4 with: languages: cpp build-mode: none - packs: codeql/misra-cpp-coding-standards + packs: codeql/misra-cpp-coding-standards@2.53.0 config-file: ./.github/codeql/codeql-config.yml + # - name: Build all components with Bazel + # run: | + # echo "Building all C++ and Rust targets for CodeQL analysis" + # # Build all targets from the checked-out repositories + # # This ensures CodeQL captures the compilation database + # bazel build --verbose_failures --config=x86_64-linux \ + # @score_baselibs//... \ + # @score_baselibs_rust//src/... \ + # @score_communication//score/mw/com/impl/... \ + # @score_persistency//src/... \ + # @score_orchestrator//src/... \ + # @score_kyron//src/... \ + # @score_lifecycle_health//src/... \ + # @score_logging//... \ + # || true # Continue even if some targets fail - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v4 with: From aa0c58385665cddddafd94f5e3ac5731a2b59e6b Mon Sep 17 00:00:00 2001 From: Piotr Korkus Date: Fri, 20 Mar 2026 10:15:46 +0100 Subject: [PATCH 2/2] add recatagorize --- .github/workflows/codeql-multiple-repo-scan.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/codeql-multiple-repo-scan.yml b/.github/workflows/codeql-multiple-repo-scan.yml index 403d810094a..4c6533ef04c 100644 --- a/.github/workflows/codeql-multiple-repo-scan.yml +++ b/.github/workflows/codeql-multiple-repo-scan.yml @@ -40,12 +40,6 @@ jobs: steps: - name: Checkout central repository uses: actions/checkout@v4 - - name: Checkout CodeQL Coding Standards scripts - uses: actions/checkout@v4 - with: - repository: github/codeql-coding-standards - path: codeql-coding-standards-repo # Klonen in diesen Ordner - ref: main # Oder eine spezifische Release-Version, z.B. 'v2.53.0-dev' # Add coding standard packages and dependencies - name: Install Python dependencies for Coding Standards scripts run: | @@ -96,6 +90,12 @@ jobs: upload-database: false # Don't upload databases for each repo output: sarif-results/ category: "multi-repo-scan" + - name: Checkout CodeQL Coding Standards scripts + uses: actions/checkout@v4 + with: + repository: github/codeql-coding-standards + path: codeql-coding-standards-repo # Klonen in diesen Ordner + ref: main # Oder eine spezifische Release-Version, z.B. 'v2.53.0-dev' - name: Recategorize Guidelines if: always() run: |