Skip to content

Add clang/codeql to nightly workflow#497

Draft
ahmed0mousa wants to merge 18 commits into
eclipse-score:mainfrom
ahmed0mousa:ahmo_add_clang_codeql_to_nightly_workflow
Draft

Add clang/codeql to nightly workflow#497
ahmed0mousa wants to merge 18 commits into
eclipse-score:mainfrom
ahmed0mousa:ahmo_add_clang_codeql_to_nightly_workflow

Conversation

@ahmed0mousa
Copy link
Copy Markdown
Contributor

No description provided.

@ahmed0mousa ahmed0mousa changed the title Ahmo add clang codeql to nightly workflow Add clang codeql to nightly workflow Jun 2, 2026
@ahmed0mousa ahmed0mousa changed the title Add clang codeql to nightly workflow Add clang/codeql to nightly workflow Jun 2, 2026
…ly_quality

Set conclusion and output variables to share the result with the calling workflow
skip Fail check if clang-tidy errors found for nightly job as we will make it impossible to distinguish "the pipeline infrastructure failed" from "we have code quality issues to track.
add clang-tidy workflow to be invoked during the nightly run, download the result, and add it to the dashboard generation
codeql workflow runs codeql tool on the whole repo and upload the findings as artifact in order to be visable on the quality dosc
add run codeql tool, download findings artifact, and add the results to the dashboard generation
…/<artifact-name>/,

but the directory name must have differed from nightly-quality-reports.
…f earlier failures

in this case no need for  continue-on-error: true in Run Unit Test step
head closes the pipe early, causing find to get SIGPIPE. prevents set -e from failing the step
use `outputs.conclusion` instead of `result` for all
three quality jobs — `result` is unreliable when `continue-on-error: true`
is in use; guard Extract step on `steps.download-coverage.outcome` to
prevent crashing when the download itself fails; download clang-tidy and
CodeQL findings to /tmp (not _quality/) since they are only needed by the
dashboard generator and must not be deployed to GitHub Pages; replace the
dead-code Resolve step with `id: setup` on Allow linux-sandbox, used as a
clean infrastructure checkpoint for the dashboard and upload steps
- Copies codeql.sarif and codeql.csv to the workspace root so
  actions/upload-artifact can find them; creates empty files as
  fallback if the analysis did not produce output
- Parses the CSV (column 3 = severity) via an inline Python heredoc to
  count errors and warnings
- Writes errors/warnings/total to $GITHUB_OUTPUT for consumption by
  nightly_quality.yml via steps.findings.outputs.*
- Appends a Markdown results table to $GITHUB_STEP_SUMMARY

Called from the Collect findings step in codeql.yml.
@ahmed0mousa ahmed0mousa force-pushed the ahmo_add_clang_codeql_to_nightly_workflow branch from 426d28d to 466c6dd Compare June 3, 2026 07:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant