chore(deps): update actions/setup-java digest to 1bcf9fb #388
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: CodeQL Security Analysis | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| - cron: "29 13 * * 2" # Weekly Tuesday 13:29 UTC | |
| permissions: {} | |
| jobs: | |
| analyze: | |
| name: Analyze Java | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| actions: read # required for github/codeql-action/init to get workflow details | |
| contents: read | |
| security-events: write # required for github/codeql-action/analyze to upload SARIF | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Java | |
| uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5 | |
| with: | |
| distribution: temurin | |
| java-version: "25" | |
| - name: Cache Maven repository | |
| uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 | |
| with: | |
| path: ~/.m2/repository | |
| key: ${{ runner.os }}-maven-codeql-${{ hashFiles('**/pom.xml') }} | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 | |
| with: | |
| languages: java | |
| tools: linked | |
| queries: security-extended | |
| # Do not use autobuild — the multi-module Maven structure requires explicit | |
| # build invocation so that CodeQL can trace the compilation correctly. | |
| # Do not use mise-action here — CodeQL needs to trace the raw Maven build. | |
| - name: Build (CodeQL traces the build) | |
| run: > | |
| ./mvnw clean compile | |
| -P '!default' | |
| -DskipTests | |
| -Dcoverage.skip=true | |
| -Dcheckstyle.skip=true | |
| -Djavadoc.skip=true | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 | |
| with: | |
| category: /language:java |