Skip to content

CodeQL

CodeQL #3024

name: "CodeQL"
on:
push:
branches: [ development ]
pull_request:
branches: [ development ]
schedule:
- cron: '0 3 * * *'
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Use Java 17
uses: actions/setup-java@v4
with:
distribution: 'adopt'
java-version: '17'
check-latest: true
- name: Use Node 18
uses: actions/setup-node@v4
with:
node-version: '18'
- name: Get branch names
id: branch-name
uses: tj-actions/branch-names@v8
- name: Cache
uses: actions/cache@v4
with:
path: |
~/.m2
~/.npm
./node_modules
./node
./nx
key: ${{ runner.os }}-deps-${{ github.run_id }}
restore-keys: |
${{ runner.os }}-deps-
- name: Java Dependencies
working-directory: apps/api
run: mvn -B dependency:resolve dependency:resolve-plugins
- name: Node Dependencies
run: yarn install
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
config-file: ./.github/codeql/codeql-config.yml
languages: java, javascript
- name: Build
uses: MansaGroup/nrwl-nx-action@v3
with:
targets: build
all: 'true'
parallel: 'false'
args: '--skip-nx-cache'
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3