]> nmode's Git Repositories - signal-cli/blob - .github/workflows/codeql-analysis.yml
8e91e580387a0549a3386958e2e95694e76c6bc0
[signal-cli] / .github / workflows / codeql-analysis.yml
1 name: "CodeQL"
2
3 on:
4 push:
5 branches: [ master ]
6 pull_request:
7 # The branches below must be a subset of the branches above
8 branches: [ master ]
9 schedule:
10 - cron: '0 7 * * 4'
11
12 jobs:
13 analyse:
14 name: Analyse
15 runs-on: ubuntu-latest
16
17 steps:
18
19 - name: Setup Java JDK
20 uses: actions/setup-java@v1
21 with:
22 java-version: 11
23
24 - name: Checkout repository
25 uses: actions/checkout@v2
26 with:
27 # We must fetch at least the immediate parents so that if this is
28 # a pull request then we can checkout the head.
29 fetch-depth: 2
30
31 # If this run was triggered by a pull request event, then checkout
32 # the head of the pull request instead of the merge commit.
33 - run: git checkout HEAD^2
34 if: ${{ github.event_name == 'pull_request' }}
35
36 # Initializes the CodeQL tools for scanning.
37 - name: Initialize CodeQL
38 uses: github/codeql-action/init@v1
39 # Override language selection by uncommenting this and choosing your languages
40 # with:
41 # languages: go, javascript, csharp, python, cpp, java
42
43 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
44 # If this step fails, then you should remove it and run the build manually (see below)
45 - name: Autobuild
46 uses: github/codeql-action/autobuild@v1
47
48 # â„šī¸ Command-line programs to run using the OS shell.
49 # 📚 https://git.io/JvXDl
50
51 # âœī¸ If the Autobuild fails above, remove it and uncomment the following three lines
52 # and modify them (or add more) to build your code if your project
53 # uses a compiled language
54
55 #- run: |
56 # make bootstrap
57 # make release
58
59 - name: Perform CodeQL Analysis
60 uses: github/codeql-action/analyze@v1