|
1 | 1 | name: "CodeQL"
|
2 | 2 |
|
3 | 3 | on:
|
4 |
| - push: |
5 |
| - branches: [ "main" ] |
6 |
| - pull_request: |
7 |
| - branches: [ "main" ] |
| 4 | + push: |
| 5 | + branches: [ "main" ] |
| 6 | + pull_request: |
| 7 | + branches: [ "main" ] |
8 | 8 |
|
9 | 9 | jobs:
|
10 |
| - analyze: |
11 |
| - name: Analyze |
12 |
| - runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} |
13 |
| - timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }} |
14 |
| - permissions: |
15 |
| - actions: read |
16 |
| - contents: read |
17 |
| - security-events: write |
| 10 | + analyze: |
| 11 | + name: Analyze |
| 12 | + runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} |
| 13 | + timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }} |
| 14 | + permissions: |
| 15 | + actions: read |
| 16 | + contents: read |
| 17 | + security-events: write |
18 | 18 |
|
19 |
| - strategy: |
20 |
| - fail-fast: false |
21 |
| - matrix: |
22 |
| - language: [ "java-kotlin" ] |
| 19 | + strategy: |
| 20 | + fail-fast: false |
| 21 | + matrix: |
| 22 | + language: [ "java-kotlin" ] |
23 | 23 |
|
24 |
| - steps: |
25 |
| - - name: Checkout repository |
26 |
| - uses: actions/checkout@v3 |
| 24 | + steps: |
| 25 | + - name: Checkout repository |
| 26 | + uses: actions/checkout@v3 |
27 | 27 |
|
28 |
| - - name: Initialize CodeQL |
29 |
| - uses: github/codeql-action/init@v2 |
30 |
| - with: |
31 |
| - languages: ${{ matrix.language }} |
32 |
| - queries: security-extended,security-and-quality |
| 28 | + - name: Initialize CodeQL |
| 29 | + uses: github/codeql-action/init@v2 |
| 30 | + with: |
| 31 | + languages: ${{ matrix.language }} |
| 32 | + queries: security-extended,security-and-quality |
33 | 33 |
|
34 |
| - # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). |
35 |
| - # If this step fails, then you should remove it and run the build manually (see below) |
36 |
| - - name: Autobuild |
37 |
| - uses: github/codeql-action/autobuild@v2 |
38 |
| - # - run: | |
39 |
| - # echo "Run, Build Application using script" |
40 |
| - # ./location_of_script_within_repo/buildscript.sh |
| 34 | + # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). |
| 35 | + # If this step fails, then you should remove it and run the build manually (see below) |
| 36 | + - name: Autobuild |
| 37 | + uses: github/codeql-action/autobuild@v2 |
| 38 | + # - run: | |
| 39 | + # echo "Run, Build Application using script" |
| 40 | + # ./location_of_script_within_repo/buildscript.sh |
41 | 41 |
|
42 |
| - - name: Perform CodeQL Analysis |
43 |
| - uses: github/codeql-action/analyze@v2 |
44 |
| - with: |
45 |
| - category: "/language:${{matrix.language}}" |
| 42 | + - name: Perform CodeQL Analysis |
| 43 | + uses: github/codeql-action/analyze@v2 |
| 44 | + with: |
| 45 | + category: "/language:${{matrix.language}}" |
0 commit comments