|
name: "CodeQL" |
|
|
|
on: |
|
push: |
|
branches: [ "master" ] |
|
pull_request: |
|
branches: [ "master" ] |
|
schedule: |
|
- cron: "12 1 * * 0" |
|
|
|
jobs: |
|
analyze: |
|
name: Analyze |
|
runs-on: ubuntu-latest |
|
permissions: |
|
actions: read |
|
contents: read |
|
security-events: write |
|
|
|
strategy: |
|
fail-fast: false |
|
matrix: |
|
language: [ java ] |
|
|
|
steps: |
|
- name: Checkout |
|
uses: actions/checkout@v3 |
|
|
|
- name: Initialize CodeQL |
|
uses: github/codeql-action/init@v3 |
|
with: |
|
languages: ${{ matrix.language }} |
|
queries: +security-and-quality |
|
|
|
- name: Autobuild |
|
uses: github/codeql-action/autobuild@v3 |
|
|
|
- name: Perform CodeQL Analysis |
|
uses: github/codeql-action/analyze@v3 |
|
with: |
|
category: "/language:${{ matrix.language }}" |