codeql.yml

name: codeql

on:
  push:
  pull_request:
  schedule:
    - cron: '0 5 * * 3'

permissions:
  contents: read
  pull-requests: read
  security-events: write

jobs:
  codeql:
    runs-on: ubuntu-latest
    container:
      image: "registry.gitlab.com/offa/docker-images/gcc:15"
    name: "CodeQL"
    steps:
      - name: Checkout
        uses: actions/checkout@main
      - uses: offa/conan-action@3cafebb5c0e5f620fff588bfc9706e124e1c33db
      - name: Install dependencies
        run: |
          script/ci_setup.sh
          add-apt-repository ppa:mhier/libboost-latest
          apt-get update
          apt-get install -y boost1.83
      - name: CodeQL Initialization
        uses: github/codeql-action/init@v4
        with:
          languages: cpp, actions
          queries: +security-and-quality
      - name: Build
        run: script/ci_build.sh
      - name: CodeQL Analysis
        uses: github/codeql-action/analyze@v4