Merge pull request #459 from maxmind/dependabot/github_actions/codeql… #1726
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Clang Static Analysis | |
| on: | |
| push: | |
| pull_request: | |
| schedule: | |
| - cron: '3 15 * * SUN' | |
| permissions: {} | |
| jobs: | |
| clang-analyzer: | |
| name: Clang Static Analysis | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| submodules: true | |
| persist-credentials: false | |
| - name: Install clang-tools | |
| run: sudo apt install clang-tools | |
| - name: Install the latest version of uv | |
| uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 | |
| - name: Build and run analyzer | |
| # We exclude extension/libmaxminddb/ as libmaxminddb has its own workflow | |
| # for this and we are not able to correct any issues with that code here. | |
| run: scan-build --exclude extension/libmaxminddb/ --status-bugs uv build | |
| env: | |
| CFLAGS: "-Werror -Wall -Wextra" | |
| MAXMINDDB_REQUIRE_EXTENSION: 1 |