Skip to content

Commit 1108156

Browse files
committed
ci: fix codeql
1 parent c255d1b commit 1108156

1 file changed

Lines changed: 31 additions & 61 deletions

File tree

Lines changed: 31 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -1,78 +1,48 @@
1-
# For most projects, this workflow file will not need changing; you simply need
2-
# to commit it to your repository.
3-
#
4-
# You may wish to alter this file to override the set of languages analyzed,
5-
# or to provide custom queries or build logic.
6-
#
7-
# ******** NOTE ********
8-
# We have attempted to detect the languages in your repository. Please check
9-
# the `language` matrix defined below to confirm you have the correct set of
10-
# supported CodeQL languages.
11-
#
121
name: "CodeQL"
132

143
on:
154
push:
16-
branches: [master]
5+
branches: [ "master" ]
176
pull_request:
18-
# The branches below must be a subset of the branches above
19-
branches: [master]
7+
branches: [ "master" ]
208
schedule:
21-
- cron: "16 14 * * 4"
9+
- cron: '26 23 * * 3'
2210

2311
jobs:
2412
analyze:
25-
name: Analyze
26-
runs-on: ubuntu-latest
13+
name: Analyze (${{ matrix.language }})
14+
runs-on: 'ubuntu-latest'
2715
permissions:
16+
# required for all workflows
17+
security-events: write
18+
19+
# required to fetch internal or private CodeQL packs
20+
packages: read
21+
22+
# only required for workflows in private repositories
2823
actions: read
2924
contents: read
30-
security-events: write
3125

3226
strategy:
3327
fail-fast: false
3428
matrix:
35-
language: ["java"]
36-
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
37-
# Learn more about CodeQL language support at https://git.io/codeql-language-support
38-
29+
include:
30+
- language: actions
31+
build-mode: none
32+
- language: java-kotlin
33+
build-mode: autobuild
3934
steps:
40-
41-
- name: Checkout repository
42-
uses: actions/checkout@v4
43-
44-
- name: Setup Java 17
45-
uses: actions/setup-java@v4
46-
with:
47-
java-version: 17
48-
distribution: "temurin"
49-
cache: "gradle"
50-
51-
# Initializes the CodeQL tools for scanning.
52-
- name: Initialize CodeQL
53-
uses: github/codeql-action/init@v3
54-
with:
55-
languages: ${{ matrix.language }}
56-
# If you wish to specify custom queries, you can do so here or in a config file.
57-
# By default, queries listed here will override any specified in a config file.
58-
# Prefix the list here with "+" to use these queries and those in the config file.
59-
# queries: ./path/to/local/query, your-org/your-repo/queries@main
60-
61-
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
62-
# If this step fails, then you should remove it and run the build manually (see below)
63-
- name: Autobuild
64-
uses: github/codeql-action/autobuild@v3
65-
66-
# ℹ️ Command-line programs to run using the OS shell.
67-
# 📚 https://git.io/JvXDl
68-
69-
# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
70-
# and modify them (or add more) to build your code if your project
71-
# uses a compiled language
72-
73-
#- run: |
74-
# make bootstrap
75-
# make release
76-
77-
- name: Perform CodeQL Analysis
78-
uses: github/codeql-action/analyze@v3
35+
- name: Checkout repository
36+
uses: actions/checkout@v4
37+
38+
# Initializes the CodeQL tools for scanning.
39+
- name: Initialize CodeQL
40+
uses: github/codeql-action/init@v3
41+
with:
42+
languages: ${{ matrix.language }}
43+
build-mode: ${{ matrix.build-mode }}
44+
45+
- name: Perform CodeQL Analysis
46+
uses: github/codeql-action/analyze@v3
47+
with:
48+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)