FilesExpand file tree

 main

/

codeql.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

67 lines (59 loc) · 2.16 KB

 main

/

codeql.yml

Copy path

Top

File metadata and controls

• Code
• Blame

67 lines (59 loc) · 2.16 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

name: CodeQL

on:

pull_request:

branches:

- main

- release/*

- benchmarks

push:

branches:

- main

- release/*

- benchmarks

schedule:

- cron: "23 16 * * 2" # weekly at 16:23 UTC on Tuesday

permissions:

contents: read

jobs:

analyze:

permissions:

contents: read

actions: read # for github/codeql-action/init to get workflow details

security-events: write # for github/codeql-action/analyze to upload SARIF results

strategy:

fail-fast: false

matrix:

include:

- language: actions

- language: java

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Set up Java 21

if: matrix.language == 'java'

uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0

with:

distribution: temurin

java-version: 21

- name: Set up gradle

if: matrix.language == 'java'

uses: gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6.0.1

- name: Initialize CodeQL

uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

with:

languages: ${{ matrix.language }}

# using "linked" helps to keep up with the latest Kotlin support

# see https://github.com/github/codeql-action/issues/1555#issuecomment-1452228433

tools: linked

- name: Assemble

if: matrix.language == 'java'

# --no-build-cache is required for codeql to analyze all modules

# --no-daemon is required for codeql to observe the compilation

# (see https://docs.github.com/en/code-security/codeql-cli/getting-started-with-the-codeql-cli/preparing-your-code-for-codeql-analysis#specifying-build-commands)

run: ./gradlew assemble --no-build-cache --no-daemon

env:

DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}

- name: Perform CodeQL analysis

uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

with:

category: "/language:${{matrix.language}}"