1
- # this workflow file will not need changing; you simply need
2
- # to commit it to your repository.
3
- #
4
- # You may wish to alter this file to override the set of languages analyzed,
5
- # or to provide custom queries or build logic.
6
- #
7
- # ******** NOTE ********
8
- # We have attempted to detect the languages in your repository. Please check
9
- # the `language` matrix defined below to confirm you have the correct set of
10
- # supported CodeQL languages.
11
- #
12
- name : " Codeql - Code Scanning"
13
-
14
- on :
15
- push :
16
- branches : [ "main" ]
17
- pull_request :
18
- # The branches below must be a subset of the branches above
19
- branches : [ "main" ]
20
- schedule :
21
- - cron : ' 44 20 * * 3'
22
-
23
- jobs :
24
- analyze :
25
- name : Analyze
26
- runs-on : ubuntu-latest
27
- permissions :
28
- actions : read
29
- contents : read
30
- security-events : write
31
-
32
- strategy :
33
- fail-fast : false
34
- matrix :
35
- language : [ 'java' ]
36
-
37
- steps :
38
- - name : Checkout repository
39
- uses : actions/checkout@v4
40
-
41
- - name : Initialize CodeQL
42
- uses : github/codeql-action/init@v3
43
- with :
44
- languages : ${{ matrix.language }}
45
- tools : latest
46
-
47
- - name : setup java
48
- uses : actions/setup-java@v4
49
- with :
50
- distribution : temurin
51
- java-version : 19
52
-
53
- - name : build
54
- uses : gradle/gradle-build-action@v2
55
- with :
56
- arguments : --configuration-cache --rerun-tasks build
57
-
58
- - name : Perform CodeQL Analysis
59
- uses : github/codeql-action/analyze@v3
60
- with :
61
- category : " /language:${{matrix.language}}"
1
+ name : " Codeql - Code Scanning"
2
+
3
+ on :
4
+ push :
5
+ branches : [ "main" ]
6
+ pull_request :
7
+ # The branches below must be a subset of the branches above
8
+ branches : [ "main" ]
9
+ schedule :
10
+ - cron : ' 44 20 * * 3'
11
+
12
+ jobs :
13
+ analyze :
14
+ name : Analyze
15
+ runs-on : ubuntu-latest
16
+ permissions :
17
+ actions : read
18
+ contents : read
19
+ security-events : write
20
+
21
+ steps :
22
+ - uses : actions/checkout@v4
23
+ - name : Initialize CodeQL
24
+ uses : github/codeql-action/init@v3
25
+ with :
26
+ languages : java
27
+ tools : latest
28
+
29
+ - uses : actions/setup-java@v4
30
+ with :
31
+ distribution : temurin
32
+ java-version : 17
33
+ - uses : gradle/actions/wrapper-validation@v3
34
+ - uses : gradle/actions/setup-gradle@v3
35
+ - run : ./gradlew build
36
+
37
+ - name : Perform CodeQL Analysis
38
+ uses : github/codeql-action/analyze@v3
39
+ with :
40
+ category : " /language:java"
0 commit comments