mirror of
https://github.com/hohn/codeql-lab.git
synced 2025-12-16 09:53:04 +01:00
Rename directories to include language. Also update files
This commit is contained in:
committed by
=Michael Hohn
parent
fe1baf7dc1
commit
102c18cce5
44
codeql-duckdb-c/README.org
Normal file
44
codeql-duckdb-c/README.org
Normal file
@@ -0,0 +1,44 @@
|
||||
* Duckdb Codeql Setup
|
||||
- fork at https://github.com/hohn/duckdb
|
||||
- github db build: enable code scanning, advanced config
|
||||
- only c/cpp
|
||||
- creates https://github.com/hohn/duckdb/blob/main/.github/workflows/codeql.yml
|
||||
- action run at https://github.com/hohn/duckdb/actions/runs/15939648352/job/44965776267
|
||||
- db download
|
||||
#+BEGIN_SRC sh
|
||||
# list dbs
|
||||
curl -H "Authorization: token $GITHUB_TOKEN" \
|
||||
https://api.github.com/repos/hohn/duckdb/code-scanning/analyses
|
||||
|
||||
|
||||
# Get DB via curl
|
||||
cd ~/work-gh/codeql-lab/assets
|
||||
curl -H "Authorization: token $GITHUB_TOKEN" \
|
||||
-H "Accept: application/zip" \
|
||||
-L \
|
||||
https://api.github.com/repos/hohn/duckdb/code-scanning/codeql/databases/cpp \
|
||||
-o duckdb-database-gh.zip
|
||||
#+END_SRC
|
||||
|
||||
- local db build:
|
||||
#+BEGIN_SRC sh
|
||||
cd ~/work-gh/codeql-lab/extern/duckdb
|
||||
# follow https://duckdb.org/docs/stable/dev/building/macos
|
||||
brew install git cmake ninja
|
||||
|
||||
# edit makefile to speed up build:
|
||||
'
|
||||
release: ${EXTENSION_CONFIG_STEP}
|
||||
mkdir -p ./build/release && \
|
||||
cd build/release && \
|
||||
cmake $(GENERATOR) $(FORCE_COLOR) ${WARNINGS_AS_ERRORS} ${FORCE_WARN_UNUSED_FLAG} ${FORCE_32_BIT_FLAG} ${DISABLE_UNITY_FLAG} ${DISABLE_SANITIZER_FLAG} ${STATIC_LIBCPP} ${CMAKE_VARS} ${CMAKE_VARS_BUILD} -DCMAKE_BUILD_TYPE=Release ../..
|
||||
|
||||
rbuild: release
|
||||
cd build/release && cmake --build . --config Release -j10
|
||||
'
|
||||
|
||||
codeql database create --language=cpp -s . -j 10 -v \
|
||||
duckdb-db \
|
||||
--command='make rbuild'
|
||||
#+END_SRC
|
||||
|
||||
4
codeql-duckdb-c/codeql-pack.lock.yml
Normal file
4
codeql-duckdb-c/codeql-pack.lock.yml
Normal file
@@ -0,0 +1,4 @@
|
||||
---
|
||||
lockVersion: 1.0.0
|
||||
dependencies: {}
|
||||
compiled: false
|
||||
12
codeql-duckdb-c/example.ql
Normal file
12
codeql-duckdb-c/example.ql
Normal file
@@ -0,0 +1,12 @@
|
||||
/**
|
||||
* @name Empty block
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
* @id cpp/example/empty-block
|
||||
*/
|
||||
|
||||
import cpp
|
||||
|
||||
from BlockStmt b
|
||||
where b.getNumStmt() = 0
|
||||
select b, "This is an empty block."
|
||||
6
codeql-duckdb-c/qlpack.yml
Normal file
6
codeql-duckdb-c/qlpack.yml
Normal file
@@ -0,0 +1,6 @@
|
||||
name: getting-started/codeql-duckdb
|
||||
version: 0.0.0
|
||||
dependencies:
|
||||
# This uses the latest version of the codeql/cpp-all library.
|
||||
# You may want to change to a more precise semver string.
|
||||
codeql/cpp-all: "*"
|
||||
Reference in New Issue
Block a user