From 609c9e10e646fd9129a8ada22f28dbf33dd8eb7b Mon Sep 17 00:00:00 2001 From: Nayanjyoti Das Date: Sat, 14 Mar 2026 11:21:59 +0530 Subject: [PATCH 1/5] Add GitHub Actions workflow for libppd --- .github/workflows/build.yml | 39 +++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 .github/workflows/build.yml diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml new file mode 100644 index 00000000..5674c815 --- /dev/null +++ b/.github/workflows/build.yml @@ -0,0 +1,39 @@ +name: Build libppd + +on: + push: + pull_request: + +jobs: + build: + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Install dependencies + run: | + sudo apt-get update + sudo apt-get install -y \ + build-essential \ + autoconf \ + automake \ + autopoint \ + gettext \ + libtool \ + pkg-config \ + libcups2-dev \ + libcupsfilters-dev \ + ghostscript \ + poppler-utils \ + mupdf-tools + + - name: Build project + run: | + ./autogen.sh + ./configure + make + + - name: Run tests + run: make check \ No newline at end of file From 1a287b29ee257c7e29bb4a982f7629b69b29da06 Mon Sep 17 00:00:00 2001 From: Nayanjyoti Das Date: Mon, 16 Mar 2026 17:51:50 +0530 Subject: [PATCH 2/5] Add CodeQL workflow for static security analysis --- .github/workflows/codeql-analysis.yml | 62 +++++++++++++++++++++++++++ 1 file changed, 62 insertions(+) create mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 00000000..9f0292bd --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,62 @@ +name: CodeQL Analysis + +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + schedule: + - cron: '0 3 * * 1' + +jobs: + analyze: + name: CodeQL Analyze + runs-on: ubuntu-latest + + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ 'cpp' ] + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + + - name: Install dependencies + run: | + sudo apt-get update + sudo apt-get install -y \ + build-essential \ + autoconf \ + automake \ + autopoint \ + gettext \ + libtool \ + libtool-bin \ + pkg-config \ + libcups2-dev \ + libcupsfilters-dev \ + ghostscript \ + mupdf-tools + + - name: Build project + run: | + ./autogen.sh + ./configure + make + + - name: Run tests + run: make check + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 \ No newline at end of file From 43e7c0b0475a070a6a9283beabd47c12aec02438 Mon Sep 17 00:00:00 2001 From: Nayanjyoti Das Date: Mon, 16 Mar 2026 18:03:19 +0530 Subject: [PATCH 3/5] install poppler-utils dependency required for pdftops --- .github/workflows/codeql-analysis.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 9f0292bd..4b2676b6 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -47,7 +47,8 @@ jobs: libcups2-dev \ libcupsfilters-dev \ ghostscript \ - mupdf-tools + mupdf-tools \ + poppler-utils - name: Build project run: | From 6d11caafb050d115435c1291533803fe4eec5b41 Mon Sep 17 00:00:00 2001 From: Nayanjyoti Das Date: Mon, 16 Mar 2026 18:11:35 +0530 Subject: [PATCH 4/5] Simplify CodeQL workflow to avoid advanced configuration conflict --- .github/workflows/codeql-analysis.yml | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 4b2676b6..f50b5915 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,12 +1,10 @@ -name: CodeQL Analysis +name: CodeQL on: push: branches: [ master ] pull_request: branches: [ master ] - schedule: - - cron: '0 3 * * 1' jobs: analyze: @@ -14,12 +12,10 @@ jobs: runs-on: ubuntu-latest permissions: - actions: read contents: read security-events: write strategy: - fail-fast: false matrix: language: [ 'cpp' ] @@ -56,8 +52,5 @@ jobs: ./configure make - - name: Run tests - run: make check - - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3 \ No newline at end of file From adb444f1e1149c3999c2190c506bfe6c73b7427c Mon Sep 17 00:00:00 2001 From: Nayanjyoti Das Date: Mon, 16 Mar 2026 18:23:47 +0530 Subject: [PATCH 5/5] Allow CodeQL workflow to run when default CodeQL scanning is enabled --- .github/workflows/codeql-analysis.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index f50b5915..eff14341 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -53,4 +53,6 @@ jobs: make - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 \ No newline at end of file + uses: github/codeql-action/analyze@v3 + continue-on-error: true + \ No newline at end of file