codeql-analysis.yml

name: "CodeQL"

on:
  pull_request:
    branches:
     - main
     - develop
  push:
    branches:
    - main
    - develop

jobs:
  codeql:
    name: Run CodeQL
    environment: Release
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: 'corretto'
          java-version: 17

      - name: Init gradle
        run: |
          chmod +x gradlew
          ./gradlew --no-daemon clean

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v2
        with:
          languages: 'kotlin'

      - name: Decode Keystore
        env:
          ENCODED_STRING: ${{ secrets.SIGNING_KEY_STORE_BASE64 }}
        run: |
          echo $ENCODED_STRING | base64 --decode > app/keystore.jks

      - name: Autobuild
        uses: github/codeql-action/autobuild@v2
        env:
          SIGNING_KEY_STORE_PATH: app/keystore.jks
          SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
          SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v2