figlet/.github/workflows/codeql.yml at 0b35ddac641fff8fb41239023ddb70e752897edc · spannm/figlet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
name: CodeQL

on:
    push:
        branches:
        - master
    pull_request:
        branches:
        - master
    schedule:
    -   cron: '30 3 * * 1'
    workflow_dispatch: {}

concurrency:
    group: ${{ github.workflow }}-${{ github.ref }}
    cancel-in-progress: true

permissions:
    contents: read

jobs:

    analyze:
        name: Analyze (java-kotlin)
        runs-on: ubuntu-latest
        permissions:
            actions: read
            contents: read
            security-events: write

        steps:
        -   name: Check out repository (incl. font submodules)
            uses: actions/checkout@v7
            with:
                submodules: recursive
                fetch-depth: 1

        -   name: Set up JDK 17
            uses: actions/setup-java@v6
            with:
                java-version: '17'
                distribution: 'temurin'
                cache: maven

        -   name: Initialize CodeQL
            uses: github/codeql-action/init@v4
            with:
                languages: java-kotlin
                build-mode: manual

        # Skip checkstyle/Error Prone/tests/invoker ITs here: this build only needs to
        # produce compiled classes for CodeQL to analyze, not to enforce project lint rules.
        -   name: Build for CodeQL analysis
            run: >
                mvn --batch-mode --file pom.xml
                -Dcheckstyle.skip=true
                -Dcheck.skip-errorprone=true
                -Dmaven.test.skip=true
                clean compile

        -   name: Perform CodeQL Analysis
            uses: github/codeql-action/analyze@v4
            with:
                category: "/language:java-kotlin"