This pull request introduces changes to the GitHub Actions workflow configuration in the .github/workflows/main.yml file. The changes involve the addition of four new jobs for CodeQL analysis on different build types and configurations.
The key changes are:
Addition of new CodeQL analysis jobs:
linux_release_codeql: This job uses the posix.yml workflow to run a CodeQL analysis on a RelWithDebInfo build type on ubuntu-latest platform with x86_64 architecture.
linux_debug_codeql: Similar to the above job, but runs the CodeQL analysis on a Debug build type.
This pull request introduces changes to the GitHub Actions workflow configuration in the
.github/workflows/main.yml
file. The changes involve the addition of four new jobs for CodeQL analysis on different build types and configurations.The key changes are:
linux_release_codeql
: This job uses theposix.yml
workflow to run a CodeQL analysis on aRelWithDebInfo
build type onubuntu-latest
platform withx86_64
architecture.linux_debug_codeql
: Similar to the above job, but runs the CodeQL analysis on aDebug
build type.linux_release_no_retpolines_codeql
: This job is similar to thelinux_release_codeql
job but withdisable_retpolines
set totrue
.linux_debug_no_retpolines_codeql
: This job is similar to thelinux_debug_codeql
job but withdisable_retpolines
set totrue
.These changes enhance the security of the codebase by using CodeQL to automatically detect common vulnerabilities and coding errors.