Try to produce SARIF from linux clang

This is just horrible.

Author: LebedevRI

.ci/clang-sarif-wrapper.sh

@@ -0,0 +1,30 @@
+#!/bin/sh
+
+# set -x
+set +e
+
+SARIFDIR="$1"
+mkdir -p "$SARIFDIR"
+
+shift
+
+INVOCATIONHASH=$(echo "$*" | sha1sum --text - | cut -d' ' -f 1)
+
+LOGNAME="$SARIFDIR/$INVOCATIONHASH.json"
+
+$@ -fdiagnostics-format=sarif -Wno-sarif-format-unstable 2>"$LOGNAME"
+RES=$?
+
+LC=$(wc -l "$LOGNAME" | cut -d' ' -f 1)
+if [ $LC -eq 3 ]; then
+   # Got no warnings.
+   exit $RES
+elif [ $LC -eq 4 ]; then
+   touch "$SARIFDIR/.warnings"
+   OUT="$(cat "$LOGNAME")"
+   # Drop last line, which is: "$N (warning|error)[s] generated."
+   echo "$OUT" | head -n 2 | tail -n 1 > "$LOGNAME"
+   exit $RES
+else
+   /bin/false # ???
+fi

.github/workflows/CI-linux.yml

@@ -223,11 +223,13 @@ jobs:
           BUILD_LOGGER_64_BIT_ONLY=YES BUILD_UI_DIST=NO make package
           export PATH="$PWD/build/CodeChecker/bin:$PATH"
       - name: Initialize CodeQL (for CodeQL static analysis)
+        id: codeql-init
         timeout-minutes: 1
         if: inputs.flavor == 'CodeQLAnalysis'
         uses: github/codeql-action/init@v3
         with:
           languages: cpp
+          source-root: ${{ github.workspace }}/rawspeed
       - name: Set up JDK 11 (for SonarCloud static analysis)
         timeout-minutes: 1
         if: inputs.flavor == 'SonarCloudStaticAnalysis' && github.repository == 'darktable-org/rawspeed' && github.event_name != 'pull_request' && github.ref_type == 'branch' && (github.ref_name == 'develop' || github.ref_name == 'stable')
@@ -264,6 +266,7 @@ jobs:
         env:
           CC: ${{ inputs.compiler-CC }}
           CXX: ${{ inputs.compiler-CXX }}
+          FAMILY: ${{ inputs.compiler-family }}
           CLANG_TIDY: ${{ inputs.compiler-CLANG_TIDY }}
           GCOV: ${{ inputs.compiler-GCOV }}
           SRC_DIR: ${{ github.workspace }}/rawspeed
@@ -279,14 +282,16 @@ jobs:
           cmake -E make_directory "${INSTALL_PREFIX}"
           export ECO="${ECO} -DRAWSPEED_REFERENCE_SAMPLE_ARCHIVE=${RPUU_DST}"
           export ECO="${ECO} -DCMAKE_CXX_CLANG_TIDY_EXPORT_FIXES_DIR=${BUILD_DIR}/clang-tidy/"
-          if [ "$FLAVOR" = "ClangTidy" ] || [ "$FLAVOR" = "ClangStaticAnalysis" ] || [ "$FLAVOR" = "ClangCTUStaticAnalysis" ] || [ "$FLAVOR" = "CodeQLAnalysis" ]; then
+          if [ "$FAMILY" = "LLVM" ]; then
             export ECO="${ECO} -DRAWSPEED_ENABLE_WERROR=OFF"
+            export ECO="${ECO} -DCMAKE_CXX_COMPILER_LAUNCHER='${SRC_DIR}/.ci/clang-sarif-wrapper.sh;${GITHUB_WORKSPACE}/clang_report/'"
           fi
           "${SRC_DIR}/.ci/ci-script.sh"
       - name: Build
         id: build
         timeout-minutes: ${{ inputs.flavor != 'ClangTidy' && (inputs.flavor != 'CodeQLAnalysis' && 7 || 12) || 25 }}
         env:
+          FAMILY: ${{ inputs.compiler-family }}
           SRC_DIR: ${{ github.workspace }}/rawspeed
           BUILD_DIR: ${{ github.workspace }}/rawspeed-build
           INSTALL_PREFIX: ${{ github.workspace }}/rawspeed-install
@@ -295,6 +300,38 @@ jobs:
         run: |
           set -xe
           "${SRC_DIR}/.ci/ci-script.sh"
+          if [ "$FLAVOR" = "ClangTidy" ] || [ "$FLAVOR" = "ClangStaticAnalysis" ] || [ "$FLAVOR" = "ClangCTUStaticAnalysis" ] || [ "$FLAVOR" = "CodeQLAnalysis" ]; then
+            exit 0
+          else
+            MARKER="${GITHUB_WORKSPACE}/clang_report/.warnings"
+            [ -f "$MARKER" ] && exit 1 || exit 0
+          fi
+      - name: Initialize CodeQL (to merge SARIF reports)
+        id: codeql-init-dummy
+        timeout-minutes: 1
+        if: inputs.compiler-family == 'LLVM' && inputs.flavor != 'CodeQLAnalysis' && !cancelled() && steps.build.conclusion != 'skipped'
+        uses: github/codeql-action/init@v3
+        with:
+          languages: cpp
+          source-root: ${{ github.workspace }}/rawspeed
+      - name: Merge clang SARIF reports
+        if: inputs.compiler-family == 'LLVM' && !cancelled() && steps.build.conclusion != 'skipped'
+        timeout-minutes: 1
+        env:
+          CODEQL_PATH: ${{ steps.codeql-init-dummy.conclusion != 'skipped' && steps.codeql-init-dummy.outputs.codeql-path || steps.codeql-init.outputs.codeql-path }}
+        run: |
+          set -xe
+          INPUTS=$(for f in "${GITHUB_WORKSPACE}/clang_report/*.json"; do echo -n " --sarif $f"; done)
+          echo ${INPUTS}
+          "${CODEQL_PATH}" github merge-results ${INPUTS} --output="${GITHUB_WORKSPACE}/clang_report.json" --sarif-merge-runs-from-equal-category
+      - name: Upload results of clang compile [SARIF]
+        timeout-minutes: 1
+        if: inputs.compiler-family == 'LLVM' && !cancelled() && steps.build.conclusion != 'skipped'
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: "${{ github.workspace }}/clang_report.json"
+          checkout_path: "${{ github.workspace }}/rawspeed"
+          category: ${{ job.name }}
       - name: Test (unit tests)
         timeout-minutes: 1
         env: