From c1be5459d9619163e26d5732ee732b417d697e9d Mon Sep 17 00:00:00 2001
From: Viktor Szakats <commit@vsz.me>
Date: Sun, 14 Sep 2025 14:14:34 +0200
Subject: [PATCH] GHA/codeql: analyse Windows Schannel WinIDN build

Follow-up to cc50f05370981e4933504e8aaec6b15880ff847f #18528

Closes #18545
---
 .github/workflows/codeql.yml | 30 +++++++++++++++++++++++++-----
 1 file changed, 25 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ff2e91c32a..e335409595 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -61,12 +61,23 @@ jobs:
         uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3
 
   c:
-    name: 'C'
-    runs-on: ubuntu-latest
+    name: 'C (${{ matrix.build.name }})'
+    runs-on: ${{ matrix.build.image }}
     permissions:
       security-events: write  # To create/update security events
+    strategy:
+      fail-fast: false
+      matrix:
+        build:
+          - name: 'Linux'
+            image: ubuntu-latest
+          - name: 'Windows'
+            image: windows-2022
+    env:
+      MATRIX_IMAGE: '${{ matrix.build.image }}'
     steps:
       - name: 'install prereqs'
+        if: ${{ contains(matrix.build.image, 'ubuntu') }}
         timeout-minutes: 5
         run: |
           sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
@@ -86,10 +97,19 @@ jobs:
 
       - name: 'build'
         timeout-minutes: 10
+        shell: bash
         run: |
-          cmake -B . -G Ninja
-          cmake --build . --verbose
-          src/curl -V
+          if [[ "${MATRIX_IMAGE}" = *'windows'* ]]; then
+            cmake -B . -DBUILD_SHARED_LIBS=OFF \
+              -DCMAKE_VS_GLOBALS=TrackFileAccess=false \
+              -DCURL_USE_SCHANNEL=ON -DCURL_USE_LIBPSL=OFF -DUSE_WIN32_IDN=ON
+            cmake --build . --verbose
+            src/Debug/curl.exe --disable --version
+          else
+            cmake -B . -G Ninja
+            cmake --build . --verbose
+            src/curl --disable --version
+          fi
 
       - name: 'perform analysis'
         uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3
-- 
2.47.3