fix(tray): advertise IconName only when the theme resolves it; 0.1.2 … #149
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| # Source-level static analysis for dish-linux (C++ / Qt6 / SDL2). | |
| # | |
| # Pin map (verify with `gh api repos/<owner>/<repo>/git/ref/tags/<tag>`): | |
| # actions/checkout @ v6.0.2 → de0fac2e4500dabe0009e67214ff5f5447ce83dd | |
| # github/codeql-action/* @ v4.35.4 → 68bde559dea0fdcac2102bfdf6230c5f70eb485e | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| - cron: "0 6 * * 1" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [cpp] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Install build dependencies | |
| run: | | |
| # A mirror that stops answering should cost seconds, not minutes: | |
| # azure.archive.ubuntu.com went dark mid-afternoon and apt sat on it | |
| # for 2-6 minutes per index before failing over to archive.ubuntu.com, | |
| # which is what blew this job's timeout. Bound the wait; apt still | |
| # reaches the working mirror, just sooner. | |
| sudo tee /etc/apt/apt.conf.d/99-dish-acquire >/dev/null <<'CONF' | |
| Acquire::http::Timeout "15"; | |
| Acquire::https::Timeout "15"; | |
| Acquire::Retries "2"; | |
| CONF | |
| sudo apt-get update | |
| sudo apt-get install -y --no-install-recommends \ | |
| build-essential cmake ninja-build pkg-config \ | |
| libsodium-dev libsdl2-dev | |
| # Not apt: noble ships Qt 6.4.2 and this project's floor is 6.7. The | |
| # action pulls the official binaries and exports CMAKE_PREFIX_PATH. | |
| - name: Set up Qt | |
| uses: ./.github/actions/setup-qt | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| queries: security-extended,security-and-quality | |
| - name: Build | |
| run: | | |
| cmake -S . -B build -G Ninja \ | |
| -DCMAKE_BUILD_TYPE=Release \ | |
| -DDISH_BUILD_TESTS=OFF | |
| cmake --build build --parallel --target Dish | |
| - name: Perform CodeQL analysis | |
| # SARIF upload requires GitHub Advanced Security on private repos. | |
| # `continue-on-error` keeps the analysis running and surfacing | |
| # findings in the logs while GHAS enablement is still pending — | |
| # see HANDOFF.md item 5. | |
| continue-on-error: true | |
| uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4 | |
| with: | |
| category: "/language:${{ matrix.language }}" | |
| upload: failure-only |