diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index cad32b9e..8d1f59f8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,61 +1,61 @@ -name: CodeQL Analysis -permissions: - security-events: write - -on: - push: - branches-ignore: - - "dependabot/**" - pull_request: - branches: [main] - schedule: - - cron: "0 0 * * 0" - workflow_dispatch: - -jobs: - analyze: - name: Analyze - runs-on: ubuntu-latest - steps: - - name: Setup .NET SDK - uses: actions/setup-dotnet@v4 - with: - dotnet-version: 9.0.x - - - name: Checkout repository - uses: actions/checkout@v4 - - - name: Initialize CodeQL - uses: github/codeql-action/init@v2 - with: - queries: security-and-quality - languages: csharp - - - name: Build solution - shell: pwsh - run: | - $pathToSolution = "src/BinSkim.sln" - $buildConfiguration = "Release" - $useSharedCompilation = "false" - $testProjects = "src/Test.FunctionalTests.BinSkim.Rules/Test.FunctionalTests.BinSkim.Rules.csproj", "src/Test.FunctionalTests.BinSkim.Driver/Test.FunctionalTests.BinSkim.Driver.csproj", "src/Test.UnitTests.BinaryParsers/Test.UnitTests.BinaryParsers.csproj", "src/Test.UnitTests.BinSkim.Rules/Test.UnitTests.BinSkim.Rules.csproj", "src/Test.UnitTests.BinSkim.Driver/Test.UnitTests.BinSkim.Driver.csproj" - - dotnet nuget locals all --clear - - # remove one or more test projects, - # so that CodeQL only analyzes the source code - dotnet sln $pathToSolution remove $testProjects - - dotnet clean $pathToSolution ` - --configuration $buildConfiguration - - dotnet restore $pathToSolution - - dotnet build $pathToSolution ` - -property:UseSharedCompilation=$useSharedCompilation ` - --configuration $buildConfiguration ` - --no-incremental ` - --no-restore - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 -# Built with ❤ by [Pipeline Foundation](https://pipeline.foundation) +name: CodeQL Analysis +permissions: + security-events: write + +on: + push: + branches-ignore: + - "dependabot/**" + pull_request: + branches: [main] + schedule: + - cron: "0 0 * * 0" + workflow_dispatch: + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + steps: + - name: Setup .NET SDK + uses: actions/setup-dotnet@v4 + with: + dotnet-version: 9.0.x + + - name: Checkout repository + uses: actions/checkout@v5 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + queries: security-and-quality + languages: csharp + + - name: Build solution + shell: pwsh + run: | + $pathToSolution = "src/BinSkim.sln" + $buildConfiguration = "Release" + $useSharedCompilation = "false" + $testProjects = "src/Test.FunctionalTests.BinSkim.Rules/Test.FunctionalTests.BinSkim.Rules.csproj", "src/Test.FunctionalTests.BinSkim.Driver/Test.FunctionalTests.BinSkim.Driver.csproj", "src/Test.UnitTests.BinaryParsers/Test.UnitTests.BinaryParsers.csproj", "src/Test.UnitTests.BinSkim.Rules/Test.UnitTests.BinSkim.Rules.csproj", "src/Test.UnitTests.BinSkim.Driver/Test.UnitTests.BinSkim.Driver.csproj" + + dotnet nuget locals all --clear + + # remove one or more test projects, + # so that CodeQL only analyzes the source code + dotnet sln $pathToSolution remove $testProjects + + dotnet clean $pathToSolution ` + --configuration $buildConfiguration + + dotnet restore $pathToSolution + + dotnet build $pathToSolution ` + -property:UseSharedCompilation=$useSharedCompilation ` + --configuration $buildConfiguration ` + --no-incremental ` + --no-restore + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 +# Built with ❤ by [Pipeline Foundation](https://pipeline.foundation) diff --git a/.github/workflows/dotnet-format.yml b/.github/workflows/dotnet-format.yml index 34135b82..d8be546b 100644 --- a/.github/workflows/dotnet-format.yml +++ b/.github/workflows/dotnet-format.yml @@ -1,16 +1,16 @@ -name: dotnet format - -on: - pull_request: - branches: [ main ] - -jobs: - check-format: - runs-on: windows-latest - - steps: - - name: check out code - uses: actions/checkout@v4 - - - name: dotnet format +name: dotnet format + +on: + pull_request: + branches: [ main ] + +jobs: + check-format: + runs-on: windows-latest + + steps: + - name: check out code + uses: actions/checkout@v5 + + - name: dotnet format run: dotnet format src --verify-no-changes \ No newline at end of file