ci: pack-ify our custom CodeQL queries and enable them in Actions

Unlike LGTM, the CodeQL Action requires the custom queries to have their
own qlpack.yml file, so let's provide one.

diff --git a/.github/codeql-config.yml b/.github/codeql-config.yml
index a702e0bc7ed65998c3c40df2a9c87f92916b7901..447e53bd1b85e9378ed3f83dc174883a57936ec7 100644 (file)
--- a/.github/codeql-config.yml
+++ b/.github/codeql-config.yml
@@ -6,4 +6,7 @@ name: "CodeQL config"
 disable-default-queries: false
 
 queries:
-  - uses: ./.github/codeql-custom.qls
+  - name: Enable possibly useful queries which are disabled by default
+    uses: ./.github/codeql-custom.qls
+  - name: systemd-specific CodeQL queries
+    uses: ./.lgtm/cpp-queries/

diff --git a/.lgtm/cpp-queries/qlpack.yml b/.lgtm/cpp-queries/qlpack.yml
new file mode 100644 (file)
index 0000000..a1a2dec
--- /dev/null
+++ b/.lgtm/cpp-queries/qlpack.yml
@@ -0,0 +1,11 @@
+---
+# vi: ts=2 sw=2 et syntax=yaml:
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+library: false
+name: systemd/cpp-queries
+version: 0.0.1
+dependencies:
+  codeql/cpp-all: "*"
+  codeql/suite-helpers: "*"
+extractor: cpp