codeql.yml

name: "CodeQL"

on:
  push:
    branches: [master]
  pull_request:
    branches: [master]
  schedule:
    - cron: '0 13 * * 6'

jobs:
  analyze:
    name: Analyze
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        language: ['cpp']
        os:
          - 'ubuntu-20.04'

    steps:
      - name: Checkout repository
        uses: actions/checkout@v2
        with:
          fetch-depth: 2

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v1
        with:
          languages: ${{ matrix.language }}
          queries: security-and-quality

      # Don't build external dependencies as part of CodeQL
      - name: Install dependencies
        run: |
          sudo apt-get update -q
          sudo apt-get install -y build-essential autoconf automake autoconf-archive libjson-c-dev libglib2.0-dev flex bison
          curl -s https://api.github.com/repos/intel/kernel-fuzzer-for-xen-project/releases/latest | grep browser_download_url | awk '{ print $2 }' | xargs wget
          tar xzvf kfx.tar.gz
          sudo dpkg -i *.deb

      - name: Compile kfx
        run: |
          export LD_LIBRARY_PATH=$PWD/libs
          export PKG_CONFIG_PATH="$PWD/lib/pkgconfig/"
          export LDFLAGS="-L$PWD/lib"
          export CFLAGS="-I$PWD/include -I$PWD/include/capstone"
          git submodule update --init libxdc
          autoreconf -vif
          ./configure
          make -j2

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v1