a b/.github/workflows/codeql.yml
1
name: "CodeQL"
2
3
on:
4
  push:
5
    branches: [ "main", "master" ]
6
  pull_request:
7
    branches: [ "main" ]
8
  schedule:
9
    - cron: '30 23 * * 6'
10
11
jobs:
12
  analyze:
13
    name: Analyze
14
    runs-on: ${{ matrix.language == 'swift' && 'macos-latest' || 'ubuntu-latest' }}
15
    timeout-minutes: ${{ matrix.language == 'swift' && 120 || 360 }}
16
    permissions:
17
      actions: read
18
      contents: read
19
      security-events: write
20
21
    strategy:
22
      fail-fast: false
23
      matrix:
24
        language: ['java']
25
26
    steps:
27
    - name: Checkout repository
28
      uses: actions/checkout@v3
29
30
    - name: Initialize CodeQL
31
      uses: github/codeql-action/init@v2
32
      with:
33
        languages: ${{ matrix.language }}
34
35
    - name: Autobuild
36
      uses: github/codeql-action/autobuild@v2
37
38
    - name: Perform CodeQL Analysis
39
      uses: github/codeql-action/analyze@v2
40
      with:
41
        category: "/language:${{ matrix.language }}"