diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index fd18c2240c4..43eaf7ed755 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,55 +1,55 @@ -#name: "CodeQL" -# -#on: -# push: -# branches: [ "main" ] -# pull_request: -# branches: [ "main" ] -# schedule: -# - cron: "45 4 * * 3" -# -#concurrency: -# group: ${{ github.workflow }}-${{ github.ref }} -# cancel-in-progress: true -# -#env: -# JAVA_VERSION: 17 -# JAVA_DISTRIBUTION: 'zulu' -# -#jobs: -# analyze: -# name: Analyze -# runs-on: ubuntu-latest -# permissions: -# actions: read -# contents: read -# security-events: write -# -# strategy: -# fail-fast: false -# matrix: -# language: [ javascript, java ] -# -# steps: -# - name: Checkout -# uses: actions/checkout@v4 -# -# - name: Initialize CodeQL -# uses: github/codeql-action/init@v3 -# with: -# languages: ${{ matrix.language }} -# queries: +security-and-quality -# -# - name: Set up JDK -# uses: actions/setup-java@v4 -# with: -# java-version: ${{env.JAVA_VERSION}} -# distribution: ${{env.JAVA_DISTRIBUTION}} -# -# - name: Autobuild -# uses: github/codeql-action/autobuild@v3 -# -# - name: Perform CodeQL Analysis -# uses: github/codeql-action/analyze@v3 -# with: -# category: "/language:${{ matrix.language }}" \ No newline at end of file +name: "CodeQL" + +on: + push: + branches: [ "main" ] + pull_request: + branches: [ "main" ] + schedule: + - cron: "45 4 * * 3" + +concurrency: + group: ${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + +env: + JAVA_VERSION: 17 + JAVA_DISTRIBUTION: 'zulu' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ javascript, java ] + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + queries: +security-and-quality + + - name: Set up JDK + uses: actions/setup-java@v4 + with: + java-version: ${{env.JAVA_VERSION}} + distribution: ${{env.JAVA_DISTRIBUTION}} + + - name: Autobuild + uses: github/codeql-action/autobuild@v3 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{ matrix.language }}" \ No newline at end of file