blob: 2ff6c82b055c17ccf20cb201cb39ea694ecc13e5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
name: "CodeQL"
on:
workflow_dispatch:
schedule:
- cron: '0 6 * * 1'
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Setup build environment
uses: danixland/HardenedPass/.github/reusable-workflows/setup-gradle@master
- name: Initialize CodeQL
uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
with:
languages: java
tools: latest
queries: +security-extended
- name: Build project
shell: bash
run: ./gradlew :app:assembleRelease
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
with:
category: "/language:java"
|
