Binary Static Analysis #1957

	# Binary static analysis of subzero CORE, to make sure it's built properly
	name: "Binary Static Analysis"

	on:
	push:
	branches: [master]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [master]
	schedule:
	# Daily at 2:42am
	- cron: '42 3 * * *'

	jobs:
	bincheck:
	name: "Binary Static Analysis"
	runs-on: ubuntu-latest
	defaults:
	run:
	shell: bash -euxo pipefail {0}

	strategy:
	fail-fast: false

	steps:
	- name: Checkout repository
	uses: actions/checkout@v2
	with:
	# We must fetch at least the immediate parents so that if this is
	# a pull request then we can checkout the head.
	fetch-depth: 2
	submodules: 'recursive'

	- name: Init Hermit
	uses: cashapp/activate-hermit@v1

	- name: Install Clang
	run: \|
	sudo apt-get update
	sudo apt install clang -y

	- name: Install python packages
	run: \|
	cd ${{ github.workspace }}
	pip install --upgrade pip
	pip install -r ./core/requirements.txt

	- name: Build subzero CORE
	run: \|
	cd ${{ github.workspace }}
	export CC=`which clang`
	export CXX=`which clang++`
	scripts/build_core.sh

	# Run binary static analysis
	- name: Run binary static analysis
	run: \|
	scripts/bsa_check_core.sh core/build

Provide feedback