codeql-build.yml

name: "CodeQL Analysis"

on:
  workflow_call:
    inputs:
      setup:
        description: 'Build Prep'
        type: string
        default: 'cp ./cfe/cmake/Makefile.sample Makefile && cp -r ./cfe/cmake/sample_defs sample_defs'
      make-prep:
        description: 'Make Prep'
        type: string
        default: ''
      make:
        description: 'Make Copy'
        type: string
        default: 'make'      
      tests: 
        description: 'Tests'
        type: string
        default: ''  

env:
  SIMULATION: native
  ENABLE_UNIT_TESTS: true
  OMIT_DEPRECATED: true
  BUILDTYPE: release

jobs:
  #Checks for duplicate actions. Skips push actions if there is a matching or duplicate pull-request action. 
  check-for-duplicates:
    runs-on: ubuntu-latest
    # Map a step output to a job output
    outputs:
      should_skip: ${{ steps.skip_check.outputs.should_skip }}
    steps:
      - id: skip_check
        uses: fkirc/skip-duplicate-actions@master
        with:
          concurrent_skipping: 'same_content'
          skip_after_successful_duplicate: 'true'
          do_not_skip: '["pull_request", "workflow_dispatch", "schedule"]'
          
  CodeQL-Security-Build:
    #Continue if check-for-duplicates found no duplicates. Always runs for pull-requests.
    needs: check-for-duplicates
    if: ${{ needs.check-for-duplicates.outputs.should_skip != 'true' }}
    runs-on: ubuntu-18.04
    timeout-minutes: 15

    steps:
      # Checks out a copy of your repository
      - name: Checkout code
        uses: actions/checkout@v2
        with:
          repository: nasa/cFS
          submodules: true

      - name: Check versions
        run: |
           git log -1 --pretty=oneline
           git submodule
           
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v1
        with:
          languages: c
          config-file: nasa/cFS/.github/codeql/codeql-security.yml@main
          
      - name: Copy sample_defs
        run: ${{ inputs.setup }}

      - name: Make prep
        run: ${{ inputs.make-prep }}
      
      - name: Make Install
        run: ${{ inputs.make }}

      - name: Run tests
        run: ${{ inputs.tests }}

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v1
        
  CodeQL-Coding-Standard-Build:
    #Continue if check-for-duplicates found no duplicates. Always runs for pull-requests.
    needs: check-for-duplicates
    if: ${{ needs.check-for-duplicates.outputs.should_skip != 'true' }}
    runs-on: ubuntu-18.04
    timeout-minutes: 15

    steps:
      # Checks out a copy of your repository
      - name: Checkout code
        uses: actions/checkout@v2
        with:
          repository: nasa/cFS
          submodules: true

      - name: Check versions
        run: |
           git log -1 --pretty=oneline
           git submodule
      - name: Checkout codeql code      
        uses: actions/checkout@v2
        with:
          repository: github/codeql 
          submodules: true 
          path: codeql

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v1
        with:
          languages: c
          config-file: nasa/cFS/.github/codeql/codeql-coding-standard.yml@main

      - name: Copy sample_defs
        run: ${{ inputs.setup }}

      - name: Make prep
        run: ${{ inputs.make-prep }}

      - name: Make Install
        run: ${{ inputs.make }}

      - name: Run tests
        run: ${{ inputs.tests }}

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v1