CodeQL #40

	name: "CodeQL"

	on:
	schedule:
	- cron: '33 14 * * 4'
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	analyze:
	if: github.repository == 'emqx/emqx'
	name: Analyze
	runs-on: ubuntu-22.04
	timeout-minutes: 360
	permissions:
	actions: read
	security-events: write
	container:
	image: ghcr.io/emqx/emqx-builder/5.3-5:1.15.7-26.2.1-2-ubuntu22.04

	strategy:
	fail-fast: false
	matrix:
	branch:
	- master
	- release-57
	language:
	- cpp
	- python

	steps:
	- name: Checkout repository
	uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
	with:
	ref: ${{ matrix.branch }}

	- name: Ensure git safe dir
	run: \|
	git config --global --add safe.directory "$GITHUB_WORKSPACE"
	make ensure-rebar3

	- name: Initialize CodeQL
	uses: github/codeql-action/init@7e187e1c529d80bac7b87a16e7a792427f65cf02 # v2.15.5
	with:
	languages: ${{ matrix.language }}

	- name: Build
	if: matrix.language == 'cpp'
	env:
	PROFILE: emqx-enterprise
	run: \|
	make emqx-enterprise-compile

	- name: Fetch deps
	if: matrix.language == 'python'
	env:
	PROFILE: emqx-enterprise
	run: \|
	make deps-emqx-enterprise

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@7e187e1c529d80bac7b87a16e7a792427f65cf02 # v2.15.5
	with:
	category: "/language:${{matrix.language}}"

Provide feedback