cli: support for GCP marketplace images (#2792) #980

	name: CodeQL

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	- "release/**"
	paths:
	- "**.go"
	- "**/go.mod"
	- "**/go.sum"
	- "**.py"
	- "**requirements.txt"
	- ".github/workflows/codeql.yml"

	jobs:
	codeql:
	name: CodeQL
	runs-on: ubuntu-22.04
	env:
	# Force CodeQL to run the extraction on the files compiled by our custom
	# build command, as opposed to letting the autobuilder figure it out.
	CODEQL_EXTRACTOR_GO_BUILD_TRACING: 'on'
	permissions:
	actions: read
	contents: read
	security-events: write

	strategy:
	fail-fast: false
	matrix:
	language: ["go"]

	steps:
	- name: Checkout repository
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

	- name: Setup Go environment
	if: matrix.language == 'go'
	uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
	with:
	go-version: "1.21.5"
	cache: false

	- name: Initialize CodeQL
	uses: github/codeql-action/init@fdcae64e1484d349b3366718cdfef3d404390e85 # v2.22.1
	with:
	languages: ${{ matrix.language }}

	- name: Install Go Dependencies
	if: matrix.language == 'go'
	run: \|
	echo "::group::Install apt dependencies"
	sudo apt-get update && sudo apt-get install -y libcryptsetup12 libcryptsetup-dev libvirt-dev
	echo "::endgroup::"

	echo "::group::Install go dependencies"
	mods=$(go list -f '{{.Dir}}' -m \| xargs)
	for mod in $mods; do
	go mod download -C "$mod"
	done
	echo "::endgroup::"

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@fdcae64e1484d349b3366718cdfef3d404390e85 # v2.22.1
	with:
	category: "/language:${{ matrix.language }}"

Provide feedback