4646 group : codeql-${{ github.workflow }}-${{ github.ref }}-${{ matrix.language }}
4747 cancel-in-progress : true
4848
49- strategy :
50- fail-fast : false
51- matrix :
52- include :
53- # build-mode: https://github.com/github/codeql-action#build-modes
54- - language : actions
55- build-mode : none
56- - language : java-kotlin
57- build-mode : manual
58- # avoid build error: "CodeQL detected code written in Java/Kotlin, GitHub Actions, C/C++ and Python,
59- # but not any written in JavaScript/TypeScript."
60- # - language: javascript-typescript
61- # build-mode: none
62- - language : python
63- build-mode : none
6449
6550 name : Analyze (${{ matrix.language }})
6651 runs-on : ubuntu-latest
7762
7863 timeout-minutes : 15
7964
65+
8066 steps :
8167 - name : " Show: GitHub context"
8268 env :
@@ -94,15 +80,13 @@ jobs:
9480
9581 - name : " Install: JDK ${{ env.JAVA_VERSION }} ☕"
9682 uses : actions/setup-java@v5 # https://github.com/actions/setup-java
97- if : matrix.language == 'java-kotlin'
9883 with :
9984 distribution : temurin
10085 java-version : ${{ env.JAVA_VERSION }}
10186
10287
10388 - name : " Cache: Local Maven Repository"
10489 uses : actions/cache/restore@v4
105- if : matrix.language == 'java-kotlin'
10690 with :
10791 # Excluded sub directory not working https://github.com/actions/toolkit/issues/713
10892 path : |
@@ -116,7 +100,6 @@ jobs:
116100
117101 - name : " Cache: Local Tycho Repository"
118102 uses : actions/cache/restore@v4
119- if : matrix.language == 'java-kotlin'
120103 with :
121104 path : |
122105 ~/.m2/repository/.cache/tycho
@@ -125,8 +108,18 @@ jobs:
125108 key : ${{ runner.os }}-${{ runner.arch }}-repo-tycho-${{ hashFiles('target-platforms/target-platform-latest/target-platform-latest.target') }}
126109
127110
111+ # https://docs.github.com/en/code-security/code-scanning
112+ - name : Initialize CodeQL
113+ uses : github/codeql-action/init@v4 # https://github.com/github/codeql-action
114+ with :
115+ languages : actions, java, javascript, python
116+ # https://github.com/github/codeql-action#build-modes
117+ build-mode : manual
118+ # https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#using-queries-in-ql-packs
119+ queries : +security-and-quality
120+
121+
128122 - name : " Build with Maven 🔨"
129- if : matrix.language == 'java-kotlin'
130123 run : |
131124 set -euo pipefail
132125
@@ -143,22 +136,9 @@ jobs:
143136 --batch-mode \
144137 --show-version \
145138 -Declipse.p2.mirrors=false \
146- -Dskip.tests =true \
139+ -Dmaven.test.skip =true \
147140 clean verify
148141
149142
150- # https://docs.github.com/en/code-security/code-scanning
151- - name : Initialize CodeQL
152- uses : github/codeql-action/init@v4 # https://github.com/github/codeql-action
153- with :
154- languages : ${{ matrix.language }}
155- # https://github.com/github/codeql-action#build-modes
156- build-mode : ${{ matrix.build-mode }}
157- # https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#using-queries-in-ql-packs
158- queries : +security-and-quality
159-
160-
161143 - name : Perform CodeQL Analysis
162144 uses : github/codeql-action/analyze@v4 # https://github.com/github/codeql-action
163- with :
164- category : " /language:${{matrix.language}}"
0 commit comments