Skip to content

Commit 4f875dd

Browse files
committed
Potential fix for code scanning alert: Workflow does not contain permissions
1 parent 2482e36 commit 4f875dd

3 files changed

Lines changed: 181 additions & 173 deletions

File tree

.github/workflows/core_codestyle.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Codestyle Checks
2+
permissions:
3+
contents: read
24
on:
35
push:
46
branches: [ master ]
Lines changed: 77 additions & 74 deletions
Original file line numberDiff line numberDiff line change
@@ -1,74 +1,77 @@
1-
name: Linux Build (GCC + Clang)
2-
3-
on:
4-
push:
5-
branches: [ master, devel ]
6-
pull_request:
7-
branches: [ master ]
8-
9-
jobs:
10-
build:
11-
runs-on: ubuntu-latest
12-
strategy:
13-
fail-fast: false
14-
matrix:
15-
include:
16-
- name: gcc
17-
cc: gcc
18-
cxx: g++
19-
pkg: g++
20-
- name: clang
21-
cc: clang
22-
cxx: clang++
23-
pkg: clang
24-
25-
name: Build (${{ matrix.name }})
26-
27-
steps:
28-
- name: Checkout repository
29-
uses: actions/checkout@v4
30-
with:
31-
submodules: recursive
32-
fetch-depth: 1
33-
34-
- name: Cache CMake build
35-
uses: actions/cache@v4
36-
with:
37-
path: _build
38-
key: ${{ runner.os }}-${{ matrix.name }}-cmake-${{ hashFiles('**/CMakeLists.txt') }}
39-
restore-keys: |
40-
${{ runner.os }}-${{ matrix.name }}-cmake-
41-
42-
- name: Install build dependencies
43-
run: |
44-
sudo apt-get update -qq
45-
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq \
46-
git cmake make build-essential \
47-
libssl-dev libbz2-dev default-libmysqlclient-dev \
48-
libace-dev libreadline-dev \
49-
${{ matrix.pkg }}
50-
51-
- name: Configure project
52-
run: |
53-
mkdir -p _build _install
54-
cd _build
55-
cmake .. \
56-
-DCMAKE_BUILD_TYPE=Release \
57-
-DCMAKE_INSTALL_PREFIX=../_install \
58-
-DCMAKE_C_COMPILER=${{ matrix.cc }} \
59-
-DCMAKE_CXX_COMPILER=${{ matrix.cxx }} \
60-
-DBUILD_TOOLS=1 \
61-
-DBUILD_MANGOSD=1 \
62-
-DBUILD_REALMD=1 \
63-
-DSOAP=1 \
64-
-DSCRIPT_LIB_ELUNA=1 \
65-
-DSCRIPT_LIB_SD3_GATE=1 \
66-
-DPLAYERBOTS=1 \
67-
-DUSE_STORMLIB=1 \
68-
-DPCH=0
69-
70-
- name: Build and install
71-
run: |
72-
cd _build
73-
make -j"$(nproc)"
74-
make install -j"$(nproc)"
1+
name: Linux Build (GCC + Clang)
2+
3+
on:
4+
push:
5+
branches: [ master, devel ]
6+
pull_request:
7+
branches: [ master ]
8+
9+
permissions:
10+
contents: read
11+
12+
jobs:
13+
build:
14+
runs-on: ubuntu-latest
15+
strategy:
16+
fail-fast: false
17+
matrix:
18+
include:
19+
- name: gcc
20+
cc: gcc
21+
cxx: g++
22+
pkg: g++
23+
- name: clang
24+
cc: clang
25+
cxx: clang++
26+
pkg: clang
27+
28+
name: Build (${{ matrix.name }})
29+
30+
steps:
31+
- name: Checkout repository
32+
uses: actions/checkout@v4
33+
with:
34+
submodules: recursive
35+
fetch-depth: 1
36+
37+
- name: Cache CMake build
38+
uses: actions/cache@v4
39+
with:
40+
path: _build
41+
key: ${{ runner.os }}-${{ matrix.name }}-cmake-${{ hashFiles('**/CMakeLists.txt') }}
42+
restore-keys: |
43+
${{ runner.os }}-${{ matrix.name }}-cmake-
44+
45+
- name: Install build dependencies
46+
run: |
47+
sudo apt-get update -qq
48+
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq \
49+
git cmake make build-essential \
50+
libssl-dev libbz2-dev default-libmysqlclient-dev \
51+
libace-dev libreadline-dev \
52+
${{ matrix.pkg }}
53+
54+
- name: Configure project
55+
run: |
56+
mkdir -p _build _install
57+
cd _build
58+
cmake .. \
59+
-DCMAKE_BUILD_TYPE=Release \
60+
-DCMAKE_INSTALL_PREFIX=../_install \
61+
-DCMAKE_C_COMPILER=${{ matrix.cc }} \
62+
-DCMAKE_CXX_COMPILER=${{ matrix.cxx }} \
63+
-DBUILD_TOOLS=1 \
64+
-DBUILD_MANGOSD=1 \
65+
-DBUILD_REALMD=1 \
66+
-DSOAP=1 \
67+
-DSCRIPT_LIB_ELUNA=1 \
68+
-DSCRIPT_LIB_SD3_GATE=1 \
69+
-DPLAYERBOTS=1 \
70+
-DUSE_STORMLIB=1 \
71+
-DPCH=0
72+
73+
- name: Build and install
74+
run: |
75+
cd _build
76+
make -j"$(nproc)"
77+
make install -j"$(nproc)"
Lines changed: 102 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -1,99 +1,102 @@
1-
name: Windows Build (MSVC)
2-
3-
on:
4-
push:
5-
branches: [ master , devel ]
6-
pull_request:
7-
branches: [ master ]
8-
9-
jobs:
10-
build:
11-
runs-on: windows-latest
12-
strategy:
13-
fail-fast: false
14-
15-
steps:
16-
17-
- name: Checkout repository
18-
uses: actions/checkout@v4
19-
with:
20-
submodules: recursive
21-
fetch-depth: 1
22-
23-
24-
- name: Cache OpenSSL
25-
id: cache-openssl
26-
uses: actions/cache@v4
27-
with:
28-
path: |
29-
C:\Program Files\OpenSSL
30-
C:\Program Files\OpenSSL-Win64
31-
key: ${{ runner.os }}-openssl-full
32-
33-
34-
- name: Install full OpenSSL (developer)
35-
if: steps.cache-openssl.outputs.cache-hit != 'true'
36-
shell: powershell
37-
run: |
38-
Write-Host "Installing latest full OpenSSL for development..."
39-
choco upgrade openssl -y --no-progress
40-
$ver = & openssl version
41-
Write-Host "Installed OpenSSL version: $ver"
42-
43-
44-
- name: Setup Windows 10 SDK
45-
uses: GuillaumeFalourd/setup-windows10-sdk-action@v2
46-
with:
47-
sdk-version: 22621
48-
49-
50-
- name: Configure OpenSSL environment
51-
shell: bash
52-
run: |
53-
if [ -d "C:/Program Files/OpenSSL/lib/VC" ]; then
54-
echo "OPENSSL_ROOT_DIR=C:/Program Files/OpenSSL" >> $GITHUB_ENV
55-
echo "OPENSSL_INCLUDE_DIR=C:/Program Files/OpenSSL/include" >> $GITHUB_ENV
56-
echo "OPENSSL_CRYPTO_LIBRARY=C:/Program Files/OpenSSL/lib/VC/libcrypto64MT.lib" >> $GITHUB_ENV
57-
echo "OPENSSL_SSL_LIBRARY=C:/Program Files/OpenSSL/lib/VC/libssl64MT.lib" >> $GITHUB_ENV
58-
elif [ -d "C:/Program Files/OpenSSL-Win64/lib/VC" ]; then
59-
echo "OPENSSL_ROOT_DIR=C:/Program Files/OpenSSL-Win64" >> $GITHUB_ENV
60-
echo "OPENSSL_INCLUDE_DIR=C:/Program Files/OpenSSL-Win64/include" >> $GITHUB_ENV
61-
echo "OPENSSL_CRYPTO_LIBRARY=C:/Program Files/OpenSSL-Win64/lib/VC/libcrypto64MT.lib" >> $GITHUB_ENV
62-
echo "OPENSSL_SSL_LIBRARY=C:/Program Files/OpenSSL-Win64/lib/VC/libssl64MT.lib" >> $GITHUB_ENV
63-
fi
64-
65-
66-
- name: Cache CMake build
67-
uses: actions/cache@v4
68-
with:
69-
path: build
70-
key: ${{ runner.os }}-cmake-${{ hashFiles('**/CMakeLists.txt') }}
71-
restore-keys: |
72-
${{ runner.os }}-cmake-
73-
74-
75-
- name: Configure CMake project
76-
shell: bash
77-
run: |
78-
mkdir -p build && cd build
79-
cmake .. \
80-
-G "Visual Studio 17 2022" \
81-
-A x64 \
82-
-DCMAKE_BUILD_TYPE=Release \
83-
-DOPENSSL_USE_STATIC_LIBS=TRUE \
84-
-DBUILD_TOOLS=1 \
85-
-DBUILD_MANGOSD=1 \
86-
-DBUILD_REALMD=1 \
87-
-DSOAP=1 \
88-
-DSCRIPT_LIB_ELUNA=1 \
89-
-DSCRIPT_LIB_SD3=1 \
90-
-DPLAYERBOTS=1 \
91-
-DUSE_STORMLIB=1 \
92-
-DPCH=0
93-
94-
95-
- name: Build project
96-
shell: bash
97-
run: |
98-
cd build
99-
cmake --build . --config Release --parallel
1+
name: Windows Build (MSVC)
2+
3+
permissions:
4+
contents: read
5+
6+
on:
7+
push:
8+
branches: [ master , devel ]
9+
pull_request:
10+
branches: [ master ]
11+
12+
jobs:
13+
build:
14+
runs-on: windows-latest
15+
strategy:
16+
fail-fast: false
17+
18+
steps:
19+
20+
- name: Checkout repository
21+
uses: actions/checkout@v4
22+
with:
23+
submodules: recursive
24+
fetch-depth: 1
25+
26+
27+
- name: Cache OpenSSL
28+
id: cache-openssl
29+
uses: actions/cache@v4
30+
with:
31+
path: |
32+
C:\Program Files\OpenSSL
33+
C:\Program Files\OpenSSL-Win64
34+
key: ${{ runner.os }}-openssl-full
35+
36+
37+
- name: Install full OpenSSL (developer)
38+
if: steps.cache-openssl.outputs.cache-hit != 'true'
39+
shell: powershell
40+
run: |
41+
Write-Host "Installing latest full OpenSSL for development..."
42+
choco upgrade openssl -y --no-progress
43+
$ver = & openssl version
44+
Write-Host "Installed OpenSSL version: $ver"
45+
46+
47+
- name: Setup Windows 10 SDK
48+
uses: GuillaumeFalourd/setup-windows10-sdk-action@v2
49+
with:
50+
sdk-version: 22621
51+
52+
53+
- name: Configure OpenSSL environment
54+
shell: bash
55+
run: |
56+
if [ -d "C:/Program Files/OpenSSL/lib/VC" ]; then
57+
echo "OPENSSL_ROOT_DIR=C:/Program Files/OpenSSL" >> $GITHUB_ENV
58+
echo "OPENSSL_INCLUDE_DIR=C:/Program Files/OpenSSL/include" >> $GITHUB_ENV
59+
echo "OPENSSL_CRYPTO_LIBRARY=C:/Program Files/OpenSSL/lib/VC/libcrypto64MT.lib" >> $GITHUB_ENV
60+
echo "OPENSSL_SSL_LIBRARY=C:/Program Files/OpenSSL/lib/VC/libssl64MT.lib" >> $GITHUB_ENV
61+
elif [ -d "C:/Program Files/OpenSSL-Win64/lib/VC" ]; then
62+
echo "OPENSSL_ROOT_DIR=C:/Program Files/OpenSSL-Win64" >> $GITHUB_ENV
63+
echo "OPENSSL_INCLUDE_DIR=C:/Program Files/OpenSSL-Win64/include" >> $GITHUB_ENV
64+
echo "OPENSSL_CRYPTO_LIBRARY=C:/Program Files/OpenSSL-Win64/lib/VC/libcrypto64MT.lib" >> $GITHUB_ENV
65+
echo "OPENSSL_SSL_LIBRARY=C:/Program Files/OpenSSL-Win64/lib/VC/libssl64MT.lib" >> $GITHUB_ENV
66+
fi
67+
68+
69+
- name: Cache CMake build
70+
uses: actions/cache@v4
71+
with:
72+
path: build
73+
key: ${{ runner.os }}-cmake-${{ hashFiles('**/CMakeLists.txt') }}
74+
restore-keys: |
75+
${{ runner.os }}-cmake-
76+
77+
78+
- name: Configure CMake project
79+
shell: bash
80+
run: |
81+
mkdir -p build && cd build
82+
cmake .. \
83+
-G "Visual Studio 17 2022" \
84+
-A x64 \
85+
-DCMAKE_BUILD_TYPE=Release \
86+
-DOPENSSL_USE_STATIC_LIBS=TRUE \
87+
-DBUILD_TOOLS=1 \
88+
-DBUILD_MANGOSD=1 \
89+
-DBUILD_REALMD=1 \
90+
-DSOAP=1 \
91+
-DSCRIPT_LIB_ELUNA=1 \
92+
-DSCRIPT_LIB_SD3=1 \
93+
-DPLAYERBOTS=1 \
94+
-DUSE_STORMLIB=1 \
95+
-DPCH=0
96+
97+
98+
- name: Build project
99+
shell: bash
100+
run: |
101+
cd build
102+
cmake --build . --config Release --parallel

0 commit comments

Comments
 (0)