codeql-analysis.yml

name: "CodeQL"

# @see https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#onpushpull_requestbranchestags
on: [push, pull_request]

# See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
permissions: write-all

jobs:
  analyze:
    name: actions-codeql-analyze
    runs-on: ubuntu-20.04

    strategy:
      fail-fast: false
      matrix:
        language: [ 'cpp' ]

    steps:
      - name: Checkout repository
        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@515828d97454b8354517688ddc5b48402b723750 # v2.1.38
        with:
          languages: ${{ matrix.language }}

      - name: Build SRS
        run: |
          echo "pwd: $(pwd), who: $(whoami)"
          docker run --rm -v $(pwd):$(pwd) -w $(pwd)/trunk ossrs/srs:ubuntu20-cache \
              bash -c "./configure && chmod 777 -R objs"
          cd trunk && ./configure && make

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@515828d97454b8354517688ddc5b48402b723750 # v2.1.38