ci: bump github/codeql-action from 4 to 4.37.3 #135
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| # Weekly run so advisories that land between PRs still get caught. | |
| - cron: "21 7 * * 1" | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| concurrency: | |
| group: codeql-${{ github.ref }} | |
| cancel-in-progress: ${{ github.event_name == 'pull_request' }} | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # Java covers the hand-written JNI bridge under | |
| # microrts_agent/microrts/src/. The vendored MicroRTS engine | |
| # (microrts.jar) and the competition bots are excluded via | |
| # linguist-vendored in .gitattributes, so CodeQL only analyzes | |
| # our own sources. | |
| language: [python, java] | |
| steps: | |
| - uses: actions/checkout@v6 | |
| # Java needs a JDK so build_bridge.sh can compile the bridge sources | |
| # against microrts.jar; CodeQL traces the javac invocation. | |
| - if: matrix.language == 'java' | |
| uses: actions/setup-java@v5 | |
| with: | |
| distribution: temurin | |
| java-version: "17" | |
| - uses: github/codeql-action/init@v4.37.3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| # security-and-quality covers the standard security queries | |
| # plus the broader code-quality set; appropriate for a | |
| # research artefact that gets occasional contributors. | |
| queries: security-and-quality | |
| # For Java: build the bridge so CodeQL has a real compilation to | |
| # analyze. Python is interpreted, no build step needed. | |
| - if: matrix.language == 'java' | |
| run: bash microrts_agent/microrts/build_bridge.sh | |
| - uses: github/codeql-action/analyze@v4.37.3 | |
| with: | |
| category: "/language:${{ matrix.language }}" |