Merge pull request #79 from ArielSAdamsNASA/fix-78-implement-coding-s…

…tandard-codeql

Fix #78, Implement Coding Standard CodeQL

.github/workflows/codeql-build.yml

@@ -2,19 +2,76 @@ name: "CodeQL Analysis"
 
 on:
  push:
+ pull_request:
  branches:
  - main
- pull_request:
 
 env:
  SIMULATION: native
  ENABLE_UNIT_TESTS: true
  OMIT_DEPRECATED: true
  BUILDTYPE: release
-
+ 
 jobs:
+ #Checks for duplicate actions. Skips push actions if there is a matching or duplicate pull-request action. 
+ check-for-duplicates:
+ runs-on: ubuntu-latest
+ # Map a step output to a job output
+ outputs:
+ should_skip: ${{ steps.skip_check.outputs.should_skip }}
+ steps:
+ - id: skip_check
+ uses: fkirc/skip-duplicate-actions@master
+ with:
+ concurrent_skipping: 'same_content'
+ skip_after_successful_duplicate: 'true'
+ do_not_skip: '["pull_request", "workflow_dispatch", "schedule"]'
+
+ CodeQL-Security-Build:
+ needs: check-for-duplicates
+ if: ${{ needs.check-for-duplicates.outputs.should_skip != 'true' }}
+ runs-on: ubuntu-18.04
+ timeout-minutes: 15
+
+ steps:
+ # Checks out a copy of your repository on the ubuntu-latest machine
+ - name: Checkout bundle
+ uses: actions/checkout@v2
+ with:
+ repository: nasa/cFS
+ submodules: true
+
+ - name: Checkout submodule
+ uses: actions/checkout@v2
+ with:
+ path: apps/sch_lab
+
+ - name: Check versions
+ run: git submodule
+
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v1
+ with:
+ languages: c
+ config-file: nasa/cFS/.github/codeql/codeql-security.yml@main
+
+ # Setup the build system
+ - name: Set up for build
+ run: |
+ cp ./cfe/cmake/Makefile.sample Makefile
+ cp -r ./cfe/cmake/sample_defs sample_defs
+ make prep
+
+ # Build the code
+ - name: Build
+ run: make sch_lab
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v1
 
- CodeQL-Build:
+ CodeQL-Coding-Standard-Build:
+ needs: check-for-duplicates
+ if: ${{ needs.check-for-duplicates.outputs.should_skip != 'true' }}
  runs-on: ubuntu-18.04
  timeout-minutes: 15
 
@@ -38,7 +95,7 @@ jobs:
  uses: github/codeql-action/init@v1
  with:
  languages: c
- queries: +security-extended, security-and-quality
+ config-file: nasa/cFS/.github/codeql/codeql-coding-standard.yml@main
 
  # Setup the build system
  - name: Set up for build