ql.yml

# codeql gh-actions file
name: CodeQL

on:
  push:
    branches:
      - '*-dev-*'
      - 'main'
  pull_request:
    # The branches below must be a subset of the branches above
    branches:
      - '*-dev-*'
    paths-ignore:
      - '**/*.md'
      - '**/*.txt'
      - 'contrib/**'
      - 'doc/**'

jobs:
  analyze:
    name: analyze
    runs-on: ubuntu-20.04
    permissions:
      actions: read
      contents: read
      security-events: write

    strategy:
      fail-fast: false
      matrix:
        language: [ 'cpp', 'python', 'go' ]
        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]

    steps:
    - name: checkout repository
      uses: actions/checkout@v3

    - name: update system
      run: |
        sudo apt-get update --yes
        sudo apt-get install -y autoconf automake libtool-bin libevent-dev build-essential python3

    - name: Dependency cache
      uses: actions/cache@v3
      env:
        cache-name: depends
      with:
        path: ./depends/built
        key: codeql-${{ env.cache-name }}-${{ hashFiles('depends/packages/*') }}

    - name: Build depends
      run: |
        pushd depends
        make -j4 HOST=x86_64-pc-linux-gnu
        popd

    - name: init codeql
      uses: github/codeql-action/init@v2
      with:
        languages: ${{ matrix.language }}

    - name: build libdogecoin
      run: |
       ./autogen.sh
       ./configure --prefix=`pwd`/depends/x86_64-pc-linux-gnu
       make check -j3 VERBOSE=1

    - name: perform codeql analysis
      uses: github/codeql-action/analyze@v2