microsoft/gctoolkit
Publicmirrored from https://github.com/microsoft/gctoolkitAvailable
.github/workflows/codeql-analysis.yml
81lines · modeblame
6ca506d9Bruno Borges4 years ago | 1 | # For most projects, this workflow file will not need changing; you simply need |
| 2 | # to commit it to your repository. | |
| 3 | # | |
| 4 | # You may wish to alter this file to override the set of languages analyzed, | |
| 5 | # or to provide custom queries or build logic. | |
| 6 | # | |
| 7 | # ******** NOTE ******** | |
| 8 | # We have attempted to detect the languages in your repository. Please check | |
| 9 | # the `language` matrix defined below to confirm you have the correct set of | |
| 10 | # supported CodeQL languages. | |
| 11 | # | |
| 12 | name: "CodeQL" | |
| 13 | | |
| 14 | on: | |
| 15 | push: | |
| 16 | branches: [ main ] | |
| 17 | pull_request: | |
| 18 | # The branches below must be a subset of the branches above | |
| 19 | branches: [ main ] | |
| 20 | schedule: | |
| 21 | - cron: '32 17 * * 5' | |
| 22 | | |
| 23 | jobs: | |
| 24 | analyze: | |
| 25 | name: Analyze | |
| 26 | runs-on: ubuntu-latest | |
| 27 | permissions: | |
| 28 | actions: read | |
| 29 | contents: read | |
| 30 | security-events: write | |
| 31 | | |
| 32 | strategy: | |
| 33 | fail-fast: false | |
| 34 | matrix: | |
| 35 | language: [ 'java' ] | |
7aecfbd1Martijn Verburg2 years ago | 36 | java: [11, 17, 21] |
6ca506d9Bruno Borges4 years ago | 37 | # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] |
| 38 | # Learn more about CodeQL language support at https://git.io/codeql-language-support | |
| 39 | | |
| 40 | steps: | |
| 41 | - name: Checkout repository | |
1cb9ba8ddependabot[bot]1 weeks ago | 42 | uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
6ca506d9Bruno Borges4 years ago | 43 | |
| 44 | # Initializes the CodeQL tools for scanning. | |
| 45 | - name: Initialize CodeQL | |
ac3f722ddependabot[bot]8 months ago | 46 | uses: github/codeql-action/init@v4 |
6ca506d9Bruno Borges4 years ago | 47 | with: |
| 48 | languages: ${{ matrix.language }} | |
| 49 | # If you wish to specify custom queries, you can do so here or in a config file. | |
| 50 | # By default, queries listed here will override any specified in a config file. | |
| 51 | # Prefix the list here with "+" to use these queries and those in the config file. | |
| 52 | # queries: ./path/to/local/query, your-org/your-repo/queries@main | |
| 53 | | |
| 54 | # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). | |
| 55 | # If this step fails, then you should remove it and run the build manually (see below) | |
7aecfbd1Martijn Verburg2 years ago | 56 | # - name: Autobuild |
| 57 | # uses: github/codeql-action/autobuild@v2 | |
6ca506d9Bruno Borges4 years ago | 58 | |
| 59 | # ℹ️ Command-line programs to run using the OS shell. | |
| 60 | # 📚 https://git.io/JvXDl | |
| 61 | | |
| 62 | # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines | |
| 63 | # and modify them (or add more) to build your code if your project | |
| 64 | # uses a compiled language | |
| 65 | | |
| 66 | #- run: | | |
| 67 | # make bootstrap | |
| 68 | # make release | |
| 69 | | |
7aecfbd1Martijn Verburg2 years ago | 70 | - name: Set up JDK ${{ matrix.java }} |
40d25881dependabot[bot]1 weeks ago | 71 | uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0 |
7aecfbd1Martijn Verburg2 years ago | 72 | with: |
| 73 | java-version: ${{ matrix.java }} | |
| 74 | distribution: 'microsoft' | |
| 75 | cache: 'maven' | |
| 76 | | |
| 77 | - name: Build with Maven | |
| 78 | run: ./mvnw -B verify -Dmaven.compiler.release=${{ matrix.java }} --file pom.xml | |
| 79 | | |
6ca506d9Bruno Borges4 years ago | 80 | - name: Perform CodeQL Analysis |
ac3f722ddependabot[bot]8 months ago | 81 | uses: github/codeql-action/analyze@v4 |