diff --git a/eng/pipelines/pr-validation-pipeline.yml b/eng/pipelines/pr-validation-pipeline.yml index 6621b10d..51778489 100644 --- a/eng/pipelines/pr-validation-pipeline.yml +++ b/eng/pipelines/pr-validation-pipeline.yml @@ -7,6 +7,44 @@ trigger: - main jobs: +- job: CodeQLAnalysis + displayName: 'CodeQL Security Analysis' + pool: + vmImage: 'ubuntu-latest' + + steps: + - script: | + sudo apt-get update + sudo apt-get install -y build-essential cmake curl git python3 python3-pip python3-dev python3-venv unixodbc-dev + displayName: 'Install build dependencies for CodeQL' + + - task: UsePythonVersion@0 + inputs: + versionSpec: '3.13' + addToPath: true + displayName: 'Use Python 3.13 for CodeQL' + + - script: | + python -m pip install --upgrade pip + pip install -r requirements.txt + displayName: 'Install Python dependencies for CodeQL' + + - task: CodeQL3000Init@0 + inputs: + Enabled: true + displayName: 'Initialize CodeQL' + + # Build the C++ extension for CodeQL analysis + - script: | + cd mssql_python/pybind + chmod +x build.sh + ./build.sh + displayName: 'Build C++ extension for CodeQL analysis' + + - task: CodeQL3000Finalize@0 + condition: always() + displayName: 'Finalize CodeQL' + - job: PytestOnWindows displayName: 'Windows x64' pool: