Merge pull request #510 from martenrebane/MOPPIOS-1450 #234
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CodeQL iOS | |
on: [push, pull_request] | |
env: | |
BUILD_NUMBER: ${{ github.run_number }} | |
jobs: | |
analyze: | |
name: CodeQL Analyze | |
runs-on: macos-latest | |
permissions: | |
actions: read | |
contents: read | |
security-events: write | |
strategy: | |
fail-fast: false | |
matrix: | |
xcode: | |
- 15.4 | |
platform: | |
- iOS | |
language: [ 'swift' ] | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
with: | |
submodules: recursive | |
# Creating sample files needed to build, but not needed for CodeQL. | |
# .plist files need a sample structure to avoid error: "unable to read input file as a property list" | |
- name: Create sample files | |
run: | | |
cd ${{ github.workspace }}/MoppApp | |
touch GoogleService-Info.plist | |
cat <<EOF > GoogleService-Info.plist | |
<?xml version="1.0" encoding="UTF-8"?> | |
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> | |
<plist version="1.0"> | |
<dict> | |
<key>Sample key</key> | |
<string>Sample value</string> | |
</dict> | |
</plist> | |
EOF | |
cd ${{ github.workspace }}/MoppApp/MoppApp | |
touch config.json | |
touch publicKey.pub | |
touch signature.rsa | |
touch defaultConfiguration.json | |
- name: Initialize CodeQL | |
uses: github/codeql-action/init@v3 | |
with: | |
languages: ${{ matrix.language }} | |
queries: +security-and-quality | |
- name: Build | |
run: | | |
cd ${{ github.workspace }}/MoppApp | |
xcodebuild -scheme MoppApp -configuration Release GOOGLE_CONF_REQUIRED=NO CODE_SIGN_IDENTITY="" CODE_SIGNING_REQUIRED=NO | |
- name: Perform CodeQL Analysis | |
uses: github/codeql-action/analyze@v3 | |
with: | |
category: "/language:${{ matrix.language }}" |