github-ci: add padding check to scan-build

OISF · Apr 26, 2023 · cb66a1e · cb66a1e
1 parent 47fe88b
commit cb66a1e
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/scan-build.yml b/.github/workflows/scan-build.yml
@@ -66,6 +66,8 @@ jobs:
         env:
           CC: clang-16
       # exclude libhtp from the analysis
+      # disable security.insecureAPI.DeprecatedOrUnsafeBufferHandling explicitly as
+      # this will require significant effort to address.
       - run: |
           scan-build-16 --status-bugs --exclude libhtp/ \
                 -enable-checker valist.Uninitialized \
@@ -83,9 +85,9 @@ jobs:
                 -enable-checker nullability.NullableReturnedFromNonnull \
                 -enable-checker nullability.NullablePassedToNonnull \
                 -enable-checker nullability.NullableDereferenced \
+                -enable-checker optin.performance.Padding \
                 \
                 -disable-checker security.insecureAPI.DeprecatedOrUnsafeBufferHandling \
-                -disable-checker optin.performance.Padding \
                 \
                 make
         env: