suzanne.soy/racket
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adjust name to distinguish sarif files.

Browse Source
This commit is contained in:
Sam Tobin-Hochstadt 2020-07-06 11:23:05 -04:00
parent ac4ae9ebba
commit bf86472f11
1 changed files with 45 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
.github/workflows/scanbuild_static-analysis.yml vendored
View File

@ -16,7 +16,7 @@ jobs:
- name: Install dependencies - name: Install dependencies
run: | run: |
apt-get update apt-get update
apt-get install -y libffi-dev unzip python libxml2-dev libfindbin-libs-perl make gcc g++ git tree apt-get install -y libffi-dev unzip python libxml2-dev libfindbin-libs-perl make gcc g++ git tree jq moreutils
- uses: actions/checkout@v2 - uses: actions/checkout@v2
with: with:
fetch-depth: 100 fetch-depth: 100
@ -42,11 +42,24 @@ jobs:
working-directory: ./racket/src working-directory: ./racket/src
run: | run: |
export cpus=$(grep -c ^processor /proc/cpuinfo) export cpus=$(grep -c ^processor /proc/cpuinfo)
scan-build -sarif -o ../../racketcgc-report -analyzer-config 'crosscheck-with-z3=true' make -j$((cpus + 1)) scan-build -sarif -o ../../racketcgc-report -analyzer-config 'crosscheck-with-z3=true' make -j$((cpus + 1)) cgc
- name: Move sarif results - name: Move sarif results
run: | run: |
mkdir sarif-files mkdir sarif-files
find racketcgc-report -type f -name '*.sarif' -exec cp \{\} sarif-files/ \; find racketcgc-report -type f -name '*.sarif' -exec cp \{\} sarif-files/ \;
- name: Adjust tool name
run: |
cd sarif-files
cat > adjust.sh <<EOF
#!/bin/bash
shopt -s globstar
for file in **/*.sarif; do
jq "setpath([\"runs\",0,\"tool\",\"driver\",\"name\"]; \"clang-$1\")" $file | sponge $file
done
EOF
chmod +x adjust.sh
./adjust.sh cgc
- name: Upload SARIF - name: Upload SARIF
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v1
if: always() if: always()
@ -69,7 +82,7 @@ jobs:
- name: Install dependencies - name: Install dependencies
run: | run: |
apt-get update apt-get update
apt-get install -y libffi-dev unzip python libxml2-dev libfindbin-libs-perl make gcc g++ git apt-get install -y libffi-dev unzip python libxml2-dev libfindbin-libs-perl make gcc g++ git jq moreutils
- uses: actions/checkout@v2 - uses: actions/checkout@v2
with: with:
fetch-depth: 100 fetch-depth: 100
@ -103,11 +116,24 @@ jobs:
working-directory: ./racket/src working-directory: ./racket/src
run: | run: |
export cpus=$(grep -c ^processor /proc/cpuinfo) export cpus=$(grep -c ^processor /proc/cpuinfo)
scan-build -sarif -o ../../racket3m-report -analyzer-config 'crosscheck-with-z3=true' make -j$((cpus + 1)) scan-build -sarif -o ../../racket3m-report -analyzer-config 'crosscheck-with-z3=true' make -j$((cpus + 1)) 3m
- name: Move sarif results - name: Move sarif results
run: | run: |
mkdir sarif-files mkdir sarif-files
find racket3m-report -type f -name '*.sarif' -exec cp \{\} sarif-files/ \; find racket3m-report -type f -name '*.sarif' -exec cp \{\} sarif-files/ \;
- name: Adjust tool name
run: |
cd sarif-files
cat > adjust.sh <<EOF
#!/bin/bash
shopt -s globstar
for file in **/*.sarif; do
jq "setpath([\"runs\",0,\"tool\",\"driver\",\"name\"]; \"clang-$1\")" $file | sponge $file
done
EOF
chmod +x adjust.sh
./adjust.sh 3m
- name: Upload SARIF - name: Upload SARIF
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v1
if: always() if: always()
@ -130,7 +156,7 @@ jobs:
- name: Install pkg dependencies - name: Install pkg dependencies
run: | run: |
apt update apt update
apt install -y libffi-dev unzip python libxml2-dev libfindbin-libs-perl make gcc g++ git uuid-dev git apt install -y libffi-dev unzip python libxml2-dev libfindbin-libs-perl make gcc g++ git uuid-dev jq moreutils
- uses: actions/checkout@v2 - uses: actions/checkout@v2
with: with:
fetch-depth: 100 fetch-depth: 100
@ -164,11 +190,24 @@ jobs:
working-directory: ./racket/src working-directory: ./racket/src
run: | run: |
export cpus=$(grep -c ^processor /proc/cpuinfo) export cpus=$(grep -c ^processor /proc/cpuinfo)
scan-build -sarif -o ../../racketcs-report -analyzer-config 'crosscheck-with-z3=true' make -j $((cpus+1)) scan-build -sarif -o ../../racketcs-report -analyzer-config 'crosscheck-with-z3=true' make -j $((cpus+1)) cs
- name: Move sarif results - name: Move sarif results
run: | run: |
mkdir sarif-files mkdir sarif-files
find racketcs-report -type f -name '*.sarif' -exec cp \{\} sarif-files/ \; find racketcs-report -type f -name '*.sarif' -exec cp \{\} sarif-files/ \;
- name: Adjust tool name
run: |
cd sarif-files
cat > adjust.sh <<EOF
#!/bin/bash
shopt -s globstar
for file in **/*.sarif; do
jq "setpath([\"runs\",0,\"tool\",\"driver\",\"name\"]; \"clang-$1\")" $file | sponge $file
done
EOF
chmod +x adjust.sh
./adjust.sh cs
- name: Upload SARIF - name: Upload SARIF
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v1
if: always() if: always()