CI: Add CodeQL analysis

QuLogic · oscargus · tacaswell · QuLogic · commit 7430026dc1ba · 2022-11-26T01:26:28.000-05:00
Co-authored-by: Oscar Gustafsson &lt;oscar.gustafsson@gmail.com&gt;
Co-authored-by: Thomas A Caswell &lt;tcaswell@gmail.com&gt;
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -0,0 +1,61 @@
+---
+name: "CodeQL"
+
+on:
+  push:
+    branches: [main, v*.x]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [main]
+  schedule:
+    - cron: '45 19 * * 1'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['cpp', 'javascript', 'python']
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        if: matrix.language != 'javascript'
+        with:
+          python-version: '3.x'
+      - name: Install dependencies
+        if: matrix.language != 'javascript'
+        run: |
+          python -m pip install --upgrade pip setuptools wheel
+          # TODO: Use pip-tools instead when it supports build-system
+          # dependencies so we don't need another copy here.
+          # https://github.com/jazzband/pip-tools/pull/1681
+          python -m pip install --upgrade \
+            certifi contourpy cycler fonttools kiwisolver importlib_resources \
+            numpy packaging pillow pyparsing python-dateutil setuptools-scm
+          echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+          setup-python-dependencies: false
+
+      - name: Build compiled code
+        if: matrix.language == 'cpp'
+        run: |
+          mkdir ~/.cache/matplotlib
+          $CODEQL_PYTHON setup.py build
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
diff --git a/setupext.py b/setupext.py
@@ -70,8 +70,8 @@ def get_from_cache_or_download(url, sha):
     if cache_dir is not None:  # Try to read from cache.
         try:
             data = (cache_dir / sha).read_bytes()
-        except IOError:
-            pass
+        except IOError as e:
+            print('Failed to read', sha, 'from cache_dir', cache_dir, e)
         else:
             if _get_hash(data) == sha:
                 return BytesIO(data)
@@ -95,8 +95,8 @@ def get_from_cache_or_download(url, sha):
             cache_dir.mkdir(parents=True, exist_ok=True)
             with open(cache_dir / sha, "xb") as fout:
                 fout.write(data)
-        except IOError:
-            pass
+        except IOError as e:
+            print('Failed to write cached', sha, 'to cache_dir', cache_dir, e)
 
     return BytesIO(data)
 
@@ -123,7 +123,8 @@ def get_and_extract_tarball(urls, sha, dirname):
             try:
                 tar_contents = get_from_cache_or_download(url, sha)
                 break
-            except Exception:
+            except Exception as e:
+                print('Failed to get tarball from', url, e)
                 pass
         else:
             raise IOError(
