Repository navigation
Fix the inverted leakage pair filter and the duplicated noiseless-qubit test in two-qubit noise #1837
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| on: | |
| push: | |
| branches: [ "main", "master", "development", "dev" ] | |
| pull_request: | |
| branches: [ "main", "master", "development", "dev" ] | |
| schedule: | |
| - cron: "29 4 * * 1" | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| analyze: | |
| name: Analyze ${{ matrix.language }} | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 360 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - language: actions | |
| build-mode: "" | |
| - language: c-cpp | |
| build-mode: none | |
| - language: python | |
| build-mode: "" | |
| - language: rust | |
| build-mode: none | |
| steps: | |
| - name: Harden the runner (egress audit) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Initialize CodeQL | |
| if: matrix.build-mode == '' | |
| uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| config-file: ./.github/codeql/codeql-config.yml | |
| - name: Initialize CodeQL with build mode | |
| if: matrix.build-mode != '' | |
| uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| config-file: ./.github/codeql/codeql-config.yml | |
| - name: Autobuild | |
| if: matrix.build-mode == 'autobuild' | |
| uses: github/codeql-action/autobuild@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4 | |
| # With build-mode none the Rust extractor runs inside this step. It loads | |
| # the cargo workspace through rust-analyzer, which compiles and runs every | |
| # build script into a scratch target dir (over 4 of the 9 extraction | |
| # minutes on a cold runner). Pin that dir so the step below can report its | |
| # size; caching it is a follow-up once the size is known. | |
| - name: Perform CodeQL analysis | |
| uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4 | |
| env: | |
| CODEQL_EXTRACTOR_RUST_OPTION_CARGO_TARGET_DIR: ${{ runner.temp }}/codeql-cargo-target | |
| with: | |
| category: "/language:${{ matrix.language }}" | |
| - name: Report the Rust extractor cargo target dir size | |
| if: matrix.language == 'rust' | |
| run: du -sh "${RUNNER_TEMP}/codeql-cargo-target" |