Skip to content

CodeQL Analysis

CodeQL Analysis #1387

name: CodeQL Analysis
on:
push:
paths:
- '.github/workflows/codeql-analysis.yml'
branches:
- 'main'
- 'master'
schedule:
- cron: '40 2 * * *' # sync-with-template: adjust
workflow_dispatch: { }
env:
DEFAULT_JAVA_VERSION: 17
GIT_REF: ${{github.ref}}
GIT_SHA: ${{github.sha}}
GITHUB_ACTIONS_TOKEN: ${{github.token}}
GITHUB_ACTIONS_RUN_ID: ${{github.run_id}}
GITHUB_ACTIONS_RUN_ATTEMPT: ${{github.run_attempt}}
GITHUB_ACTIONS_JOB: ${{github.job}}
GRADLE_OPTS: >-
-Dorg.gradle.console.interactive=false
-Dorg.gradle.caching=false
jobs:
codeql-analysis:
name: CodeQL Analysis
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
- name: Setup Java ${{env.DEFAULT_JAVA_VERSION}}
uses: actions/setup-java@v5
with:
java-version: |
${{env.DEFAULT_JAVA_VERSION}}
distribution: temurin
- name: Checkout repository
uses: actions/checkout@v7
with:
submodules: recursive
fetch-depth: 2
- name: Validate Gradle Wrapper
uses: Wandalen/wretry.action@v3.8.0
with:
action: gradle/actions/wrapper-validation@v6
attempt_limit: 3
attempt_delay: 5000
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
with:
validate-wrappers: false
- name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: java
- name: Compile
run: |
./gradlew allClasses
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4