Enabling souffle-lang/souffle GitHub dependency graph with vcpk (#2427)…

… (#2428)

integrate GitHub dependency-graph

For the story, a GitHub representative contacted me to test their new dependency graph integration for C++ projects based on vcpkg.

Instructions that I followed:
https://learn.microsoft.com/en-us/vcpkg/github-integration#dependency-graph

Relates to:
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-supply-chain-security

.github/workflows/VS-CI-Tests.yml

@@ -33,9 +33,9 @@ jobs:
 
     # Use vcpkg to install devel library dependencies.
     - name: Library Dependencies (vcpkg)
-      uses: lukka/run-vcpkg@v10
+      uses: lukka/run-vcpkg@v11
       with:
-        vcpkgGitCommitId: 'a7b6122f6b6504d16d96117336a0562693579933'
+        vcpkgGitCommitId: '56954f1db97f38635782d5ad7cdfd45d2731c854'
 
     - name: Create Build Directory
       working-directory: ${{github.workspace}}

.github/workflows/populate-deps.yml

@@ -0,0 +1,40 @@
+name: Populate dependencies
+
+on:
+    push:
+        branches: [ master ]
+    workflow_dispatch:
+
+permissions:
+    contents: write
+
+env:
+    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    VCPKG_FEATURE_FLAGS: dependencygraph
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        submodules: 'recursive'
+
+    - name: Checkout vcpkg
+      run: |
+            git clone https://github.com/Microsoft/vcpkg.git
+            cd vcpkg
+            git checkout 56954f1db97f38635782d5ad7cdfd45d2731c854
+
+    - name: Bootstrap vcpkg
+      working-directory: vcpkg
+      run: ./bootstrap-vcpkg.sh
+
+    # This will execute a dry-run, meaning that libraries will not be built and
+    # installed, but they will still be reported to the GitHub dependency graph.
+    # This step assumes `vcpkg` has been bootstrapped (run `./vcpkg/bootstrap-vcpkg`)
+    - name: Run vcpkg
+      run: ${{ github.workspace }}/vcpkg/vcpkg install --dry-run --debug
+

vcpkg.json

@@ -12,5 +12,5 @@
       "version": "3.40.1"
     }
   ],
-  "builtin-baseline": "a7b6122f6b6504d16d96117336a0562693579933"
+  "builtin-baseline": "56954f1db97f38635782d5ad7cdfd45d2731c854"
 }