diff --git a/.github/workflows/msvc-code-analysis.yml b/.github/workflows/msvc-code-analysis.yml index dbd0697..c5aad8d 100644 --- a/.github/workflows/msvc-code-analysis.yml +++ b/.github/workflows/msvc-code-analysis.yml @@ -19,38 +19,35 @@ on: env: # Path to the CMake build directory. build: '${{ github.workspace }}/build' - -permissions: - contents: read + config: 'Debug' jobs: analyze: - permissions: - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results - actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status name: Analyze runs-on: windows-latest steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v2 - name: Configure CMake - run: cmake -B ${{ env.build }} + run: cmake -B ${{ env.build }} -DCMAKE_BUILD_TYPE=${{ env.config }} # Build is not required unless generated source files are used # - name: Build CMake - # run: cmake --build ${{ env.build }} + # run: cmake --build ${{ env.build }} --config ${{ env.config }} - - name: Initialize MSVC Code Analysis - uses: microsoft/msvc-code-analysis-action@04825f6d9e00f87422d6bf04e1a38b1f3ed60d99 + - name: Run MSVC Code Analysis + uses: microsoft/msvc-code-analysis-action@v0.1.1 # Provide a unique ID to access the sarif output path id: run-analysis with: cmakeBuildDirectory: ${{ env.build }} + buildConfiguration: ${{ env.config }} # Ruleset file that will determine what checks will be run ruleset: NativeRecommendedRules.ruleset + # Paths to ignore analysis of CMake targets and includes + # ignoredPaths: ${{ github.workspace }}/dependencies;${{ github.workspace }}/test # Upload SARIF file to GitHub Code Scanning Alerts - name: Upload SARIF to GitHub @@ -59,8 +56,8 @@ jobs: sarif_file: ${{ steps.run-analysis.outputs.sarif }} # Upload SARIF file as an Artifact to download and view - # - name: Upload SARIF as an Artifact - # uses: actions/upload-artifact@v3 - # with: - # name: sarif-file - # path: ${{ steps.run-analysis.outputs.sarif }} + - name: Upload SARIF as an Artifact + uses: actions/upload-artifact@v2 + with: + name: sarif-file + path: ${{ steps.run-analysis.outputs.sarif }}