Merge pull request #121 from marquiz/devel/codeql-report

github: enhance codeql action to generate pdf report

.github/workflows/common-codeql.yaml

@@ -1,6 +1,11 @@
 name: CodeQL
 on:
   workflow_call:
+    inputs:
+      export-report:
+        default: false
+        required: false
+        type: boolean
 
 jobs:
   codeql-scan:
@@ -17,3 +22,17 @@ jobs:
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2
+
+    - name: Generate CodeQL Security Report
+      if: ${{ inputs.export-report }}
+      uses: rsdmike/[email protected]
+      with:
+        template: report
+        token: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Upload PDF report as an artifact
+      if: ${{ inputs.export-report }}
+      uses: actions/upload-artifact@v3
+      with:
+        name: codeql-report
+        path: report.pdf

.github/workflows/release.yaml

@@ -13,3 +13,8 @@ jobs:
     uses: "./.github/workflows/common-trivy.yaml"
     with:
       export-csv: true
+
+  codeql:
+    uses: "./.github/workflows/common-codeql.yaml"
+    with:
+      export-report: true