fix(ci): re-enable CodeQL for C++ COMPASS-7540 (#55)

Author: addaleax

.github/workflows/codeql.yml

@@ -36,8 +36,7 @@ jobs:
       matrix:
         language:
           - 'javascript'
-          # TODO: https://jira.mongodb.org/browse/COMPASS-7540, enable the cpp analysis.
-          # - 'cpp'
+          - 'cpp'
 
     steps:
     - name: Checkout repository
@@ -78,7 +77,7 @@ jobs:
     - name: Build cpp
       if: matrix.language == 'cpp'
       run: |
-        node bin/boxednode.js -s test/resources/example.js -t example
+        ./test/compile-main-template-only.sh
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2

.gitignore

@@ -22,3 +22,4 @@ tmp/
 .esm-wrapper.mjs
 /lib/
 package-lock.json
+main-template-build

resources/main-template.cc

@@ -35,7 +35,7 @@ using namespace v8;
 #endif
 
 // Snapshot config is supported since https://github.com/nodejs/node/pull/50453
-#if NODE_VERSION_AT_LEAST(21, 6, 0) && !defined(BOXEDNODE_SNAPSHOT_CONFIG_FLAGS)
+#if NODE_VERSION_AT_LEAST(20, 12, 0) && !defined(BOXEDNODE_SNAPSHOT_CONFIG_FLAGS)
 #define BOXEDNODE_SNAPSHOT_CONFIG_FLAGS (SnapshotFlags::kWithoutCodeCache)
 #endif
 

test/compile-main-template-only.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+
+# script to only build the code in resources/
+# for CodeQL testing
+
+set -e
+set -x
+cd "$(dirname $0)/.."
+if [ ! -e main-template-build ]; then
+  mkdir main-template-build
+  pushd main-template-build
+  curl -O https://nodejs.org/dist/v20.12.0/node-v20.12.0.tar.xz
+  tar --strip-components=1 -xf node-*.tar.xz
+  popd
+fi
+
+g++ \
+  -Imain-template-build/src \
+  -Imain-template-build/deps/v8/include \
+  -Imain-template-build/deps/uv/include \
+  -DREPLACE_DECLARE_LINKED_MODULES= \
+  -DREPLACE_DEFINE_LINKED_MODULES= \
+  -DREPLACE_WITH_ENTRY_POINT='"placeholder"' \
+  -DBOXEDNODE_CODE_CACHE_MODE='"placeholder"' \
+  -DREPLACE_WITH_MAIN_SCRIPT_SOURCE_GETTER= \
+  -fPIC -shared \
+  -o main-template-build/out.so \
+  -include resources/add-node_api.h \
+  -include resources/add-node.h \
+  resources/main-template.cc