Create codeql.yml

[faddat]

Hey I think that this may need to run on a GR or we need to give it special permission to run on github actions but it's really really great.

It detects things like non-determinism errors.

[assafmo]

Is this static analysis magic?

[faddat]

it is exactly the static analysis magic

[Cashmaney]

Very cool. Interested to see whether it will work out of the box, or if we'll need to tinker with it

[faddat]

I find that setting the tag secretcli can help, locally. But also seems my local dev env "ain't quite right".

When I set the build tag, it works better but (eg: gopls) doesn't seem to work perfectly.

[Cashmaney]

I find that setting the tag secretcli can help, locally. But also seems my local dev env "ain't quite right".

When I set the build tag, it works better but (eg: gopls) doesn't seem to work perfectly.

The secretcli tag just compiles without the SGX enclave part, so it's not really a complete build.

Also, are we missing anything else for this action to run? I was expecting the codeql workflow to be available in this branch already 🤔

[assafmo]

@Cashmaney I believe the secretcli tag is used here to silence the VSCode IDE linkage errors

[cloudflare-workers-and-pages[bot]]

Deploying with    Cloudflare Pages

Latest commit:	dbb42ff
Status:	✅  Deploy successful!
Preview URL:	https://778a69e1.swagger-preview.pages.dev
Branch Preview URL:	https://faddat-codeql.swagger-preview.pages.dev

View logs

[assafmo]

#1020