Skip to content

.github: enable codeql,cppcheck static analysis #1930

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
Martinfx wants to merge 1 commit into
base: main
Choose a base branch
from
Open

.github: enable codeql,cppcheck static analysis #1930

Martinfx wants to merge 1 commit into from

Conversation

@Martinfx
Copy link
Contributor

@Martinfx Martinfx commented Dec 17, 2025

Hi,
This enables static analysis only for the sys/ folded with pull request now and branches main, stable/15, stable/14, stable/13. I tested on a pull request.

@github-actions
Copy link

github-actions bot commented Dec 17, 2025 •
edited
Loading

Thank you for taking the time to contribute to FreeBSD!
All issues resolved.

@Martinfx Martinfx force-pushed the max-support-sec-workflow branch 2 times, most recently from 2d69b72 to 33d6eea Compare December 17, 2025 10:59
@emaste
Copy link
Member

emaste commented Dec 17, 2025

Can you link to the sample results from your test pull request?

@Martinfx Martinfx force-pushed the max-support-sec-workflow branch from 33d6eea to 2c4a027 Compare December 17, 2025 14:42
@Martinfx
Copy link
Contributor Author

Martinfx commented Dec 17, 2025 •
edited
Loading

Can you link to the sample results from your test pull request?

Hi,
Here is testing pull request: BSD-CZ#1
and here is link for result scan : https://github.com/BSD-CZ/freebsd-src/security/code-scanning?page=1 but more settings maybe..

@Martinfx Martinfx force-pushed the max-support-sec-workflow branch from 2c4a027 to 7d2dde2 Compare December 17, 2025 15:49
@emaste
Copy link
Member

emaste commented Dec 17, 2025

2nd link gives me a 404, I guess it is private to your GH login. Maybe you can paste a screenshot example? I'm just curious about the kind of results it produces.

@Martinfx
Copy link
Contributor Author

Martinfx commented Dec 17, 2025 •
edited
Loading

2nd link gives me a 404, I guess it is private to your GH login. Maybe you can paste a screenshot example? I'm just curious about the kind of results it produces.

Screenshot at 2025-12-17 19-14-22 Screenshot at 2025-12-17 19-19-19

and sometimes false positive..

@Martinfx
Copy link
Contributor Author

Martinfx commented Dec 17, 2025

2nd link gives me a 404, I guess it is private to your GH login. Maybe you can paste a screenshot example? I'm just curious about the kind of results it produces.

I can also give you access to view results.

@Martinfx
Copy link
Contributor Author

Martinfx commented Dec 17, 2025 •
edited
Loading

2nd link gives me a 404, I guess it is private to your GH login. Maybe you can paste a screenshot example? I'm just curious about the kind of results it produces.

Is it all ok?

@Martinfx
.github: enable codeql,cppcheck analysis
ff532ec 
Signed-off-by: Martin Filla <freebsd@sysctl.cz>
@Martinfx Martinfx force-pushed the max-support-sec-workflow branch from 7d2dde2 to ff532ec Compare December 17, 2025 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Martinfx @emaste