codeql.yml

---
name: CodeQL

on:
  pull_request:
    branches:
      - main
  push:
    branches:
      - main

jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write
    strategy:
      fail-fast: false
      matrix:
        language:
          - ruby
    steps:
      - name: "Checkout repository"
        uses: actions/checkout@v4
      - name: "Initialize CodeQL"
        uses: github/codeql-action/init@v3
        with:
          languages: "${{ matrix.language }}"
      - name: Autobuild
        uses: github/codeql-action/autobuild@v3
      - name: "Perform CodeQL Analysis"
        uses: github/codeql-action/analyze@v3
      - uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.3'
          bundler-cache: true
      - name: "Run rufo code formatting checks"
        run: |
          gem install rufo
          rufo --check ./lib
          rufo --check ./spec
      - name: "Run yard documentation checks"
        run: |
          gem install yard
          yard doc --fail-on-warning