try codeql

[PhilipDeegan]

Summary by CodeRabbit

• New Features
  • Introduced CodeQL configuration for Python and non-compiled languages.
• Chores
  • Added concurrency settings to macOS and Ubuntu workflows to prevent redundant runs.
  • Implemented a new CodeQL analysis workflow for enhanced code security.

[coderabbitai]

Walkthrough

Walkthrough

The changes introduced across multiple files primarily focus on enhancing the project's GitHub Actions workflows and CodeQL configurations. The updates include the addition of a concurrency section in the workflow files, the introduction of a new CodeQL analysis workflow, and the specification of paths in the CodeQL configuration file. These changes do not alter the project's core functionality or its exported functions, global data structures, global variables, interfaces, return values, or thrown exceptions.

Changes

File	Change Summary
.github/codeql-config.yml	Added a CodeQL configuration for Python/non-compiled languages, specifying paths to include and ignore.
.github/workflows/cmake_macos.yml, .github/workflows/cmake_ubuntu.yml	Introduced a new "concurrency" section with the "group" and "cancel-in-progress" properties.
.github/workflows/codeql.yml	Introduced a GitHub Actions workflow file for CodeQL analysis, defining a job "analyze" that runs on Ubuntu, with a strategy for Python and C++ languages.

---

Tips

Chat with CodeRabbit Bot (@coderabbitai)

• If you reply to a review comment from CodeRabbit, the bot will automatically respond.
• To engage with CodeRabbit bot directly around the specific lines of code in the PR, mention @coderabbitai in your review comment
• Note: Review comments are made on code diffs or files, not on the PR overview.
• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Commands (invoked as PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger a review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai help to get help.
• @coderabbitai resolve to resolve all the CodeRabbit review comments.

Note: For conversation with the bot, please use the review comments on code diffs or files.

CodeRabbit Configration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• The JSON schema for the configuration file is available here.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.v2.json

[coderabbitai]

Review Status

Actionable comments generated: 0

Configuration used: .coderabbit.yaml

Commits

Files that changed from the base of the PR and between 32ae294 and 02049c8.

Files selected for processing (4)

• .github/codeql-config.yml (1 hunks)
• .github/workflows/cmake_macos.yml (1 hunks)
• .github/workflows/cmake_ubuntu.yml (1 hunks)
• .github/workflows/codeql.yml (1 hunks)

Files skipped from review due to trivial changes (2)

• .github/codeql-config.yml
• .github/workflows/cmake_ubuntu.yml

Additional comments: 2

.github/workflows/cmake_macos.yml (1)

• 3-5: The concurrency group and cancel-in-progress properties are correctly set. This will help to cancel redundant jobs and keep the workflow efficient.

.github/workflows/codeql.yml (1)

• 1-58: The CodeQL workflow configuration looks good. It's set to run on both Python and C++ code, and it's triggered on pushes and pull requests to the master branch, as well as on a weekly schedule. The concurrency settings are also correctly configured to cancel any in-progress runs when a new one is triggered. The permissions are set to read for actions and contents, and write for security events, which is appropriate for a CodeQL analysis workflow. The workflow checks out the code, configures for C++ if applicable, initializes CodeQL, performs autobuild for Python, builds C++ code, and then analyzes the code using CodeQL.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.