Implement script and scene tier policy limits with enforcement in the… #16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Advanced" | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| schedule: | |
| - cron: "45 19 * * 6" | |
| permissions: | |
| contents: read | |
| security-events: write | |
| packages: read | |
| actions: read | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - language: actions | |
| build-mode: none | |
| - language: python | |
| build-mode: none | |
| - language: c-cpp | |
| build-mode: manual | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v6 | |
| with: | |
| submodules: recursive | |
| fetch-depth: 0 | |
| - name: Set up Python | |
| if: matrix.language == 'c-cpp' | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: "3.12" | |
| - name: Install SCons | |
| if: matrix.language == 'c-cpp' | |
| shell: bash | |
| run: | | |
| python -m pip install --upgrade pip | |
| python -m pip install scons | |
| scons --version | |
| - name: Verify native build inputs | |
| if: matrix.language == 'c-cpp' | |
| shell: bash | |
| run: | | |
| python - <<'PY' | |
| from pathlib import Path | |
| required = [ | |
| "SConstruct", | |
| "godot-cpp/SConstruct", | |
| "third-party/godot/extension_api.json", | |
| "third-party/sqlite3/sqlite3.c", | |
| ] | |
| missing = [path for path in required if not Path(path).is_file()] | |
| if missing: | |
| print("Missing required files:") | |
| for path in missing: | |
| print(f" - {path}") | |
| raise SystemExit(1) | |
| print("All required native build inputs are present.") | |
| PY | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| - name: Build C/C++ for CodeQL | |
| if: matrix.language == 'c-cpp' | |
| shell: bash | |
| run: | | |
| scons \ | |
| platform=linux \ | |
| target=template_debug \ | |
| arch=x86_64 \ | |
| custom_api_file=third-party/godot/extension_api.json \ | |
| generate_bindings=yes \ | |
| -j2 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |
| with: | |
| category: "/language:${{ matrix.language }}" |