nmode's Git Repositories - signal-cli/blob - .github/workflows/codeql-analysis.yml

   1 name: "CodeQL"
   2
   3 on:
   4   push:
   5     branches: [ master ]
   6   pull_request:
   7     # The branches below must be a subset of the branches above
   8     branches: [ master ]
   9   schedule:
  10     - cron: '0 7 * * 4'
  11
  12 permissions:
  13   contents: read # to fetch code (actions/checkout)
  14   security-events: write
  15
  16 jobs:
  17   analyse:
  18     name: Analyse
  19     runs-on: ubuntu-latest
  20
  21     steps:
  22
  23       - name: Setup Java JDK
  24         uses: actions/setup-java@v3
  25         with:
  26           distribution: 'zulu'
  27           java-version: 17
  28
  29       - name: Checkout repository
  30         uses: actions/checkout@v4
  31         with:
  32           # We must fetch at least the immediate parents so that if this is
  33           # a pull request then we can checkout the head.
  34           fetch-depth: 2
  35
  36       # Initializes the CodeQL tools for scanning.
  37       - name: Initialize CodeQL
  38         uses: github/codeql-action/init@v2
  39         # Override language selection by uncommenting this and choosing your languages
  40         # with:
  41         #   languages: go, javascript, csharp, python, cpp, java
  42
  43       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
  44       # If this step fails, then you should remove it and run the build manually (see below)
  45       - name: Autobuild
  46         uses: github/codeql-action/autobuild@v2
  47
  48       # ℹ️ Command-line programs to run using the OS shell.
  49       # 📚 https://git.io/JvXDl
  50
  51       # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
  52       #    and modify them (or add more) to build your code if your project
  53       #    uses a compiled language
  54
  55       #- run: |
  56       #   make bootstrap
  57       #   make release
  58
  59       - name: Perform CodeQL Analysis
  60         uses: github/codeql-action/analyze@v2