Skip to content

🐛 fix(ci): main builds compute fresh CalVer and tag locally befor… #27

🐛 fix(ci): main builds compute fresh CalVer and tag locally befor…

🐛 fix(ci): main builds compute fresh CalVer and tag locally befor… #27

Workflow file for this run

name: codeql
on:
push:
branches: [main]
pull_request:
branches: [main]
schedule:
- cron: "0 6 * * 1"
workflow_dispatch:
# Cancel obsolete runs when a new commit lands on the same ref.
concurrency:
group: codeql-${{ github.ref }}
cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
jobs:
analyze:
# CodeQL upload requires Code Scanning enabled, which is free on
# public repos and gated behind GitHub Advanced Security on private
# ones. Skip the whole workflow until the repo is public.
if: github.event.repository.visibility == 'public'
runs-on: ubuntu-latest
permissions:
security-events: write
actions: read
contents: read
strategy:
fail-fast: false
matrix:
language: [java-kotlin, python]
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- name: Initialize CodeQL
uses: github/codeql-action/init@0daab03d71ff584ef619d027a3fd9146679c5d84 # v3
with:
languages: ${{ matrix.language }}
- if: matrix.language == 'java-kotlin'
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
with:
distribution: temurin
java-version: "17"
- if: matrix.language == 'java-kotlin'
uses: android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3
with:
packages: "platform-tools platforms;android-34 build-tools;34.0.0"
- if: matrix.language == 'java-kotlin'
run: ./gradlew assembleDebug -x test --stacktrace
- if: matrix.language == 'python'
uses: github/codeql-action/autobuild@0daab03d71ff584ef619d027a3fd9146679c5d84 # v3
- uses: github/codeql-action/analyze@0daab03d71ff584ef619d027a3fd9146679c5d84 # v3