Skip to content

Commit 2a28063

Browse files
authored
Merge pull request #81 from cristan/feature/codeql
Add a CodeQL to hopefully fix CodeQL analysis
2 parents cb24e51 + 8cb6872 commit 2a28063

2 files changed

Lines changed: 128 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
name: CodeQL
2+
3+
on:
4+
pull_request:
5+
branches: [ main, develop ]
6+
push:
7+
branches:
8+
- main
9+
- develop
10+
schedule:
11+
- cron: '45 2 * * 0'
12+
workflow_dispatch:
13+
14+
permissions:
15+
contents: read
16+
security-events: write
17+
actions: read
18+
19+
concurrency:
20+
group: ${{ github.workflow }}-${{ github.ref }}
21+
cancel-in-progress: true
22+
23+
jobs:
24+
analyze:
25+
name: Analyze (${{ matrix.language }})
26+
runs-on: ubuntu-latest
27+
28+
strategy:
29+
fail-fast: false
30+
matrix:
31+
include:
32+
- language: actions
33+
build-mode: none
34+
- language: java-kotlin
35+
build-mode: manual
36+
37+
steps:
38+
- uses: actions/checkout@v6
39+
40+
- name: Initialize CodeQL
41+
uses: github/codeql-action/init@v4
42+
with:
43+
languages: ${{ matrix.language }}
44+
build-mode: ${{ matrix.build-mode }}
45+
46+
- name: Set up JDK 21
47+
if: matrix.language != 'actions'
48+
uses: actions/setup-java@v5
49+
with:
50+
java-version: '21'
51+
distribution: 'temurin'
52+
cache: 'gradle'
53+
54+
- name: Build for CodeQL (Kotlin)
55+
if: matrix.language == 'java-kotlin'
56+
# --no-build-cache to always compile so CodeQL's Kotlin extractor always runs
57+
run: ./gradlew :androidApp:assembleDebug --no-build-cache
58+
59+
- name: Perform CodeQL Analysis
60+
uses: github/codeql-action/analyze@v4
61+
with:
62+
category: "/language:${{ matrix.language }}"
Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<Scheme
3+
version = "1.7">
4+
<BuildAction
5+
parallelizeBuildables = "YES"
6+
buildImplicitDependencies = "YES">
7+
<BuildActionEntries>
8+
<BuildActionEntry
9+
buildForTesting = "YES"
10+
buildForRunning = "YES"
11+
buildForProfiling = "YES"
12+
buildForArchiving = "YES"
13+
buildForAnalyzing = "YES">
14+
<BuildableReference
15+
BuildableIdentifier = "primary"
16+
BlueprintIdentifier = "16DC6CBDD98FF169D631ACA0"
17+
BuildableName = "OVfietsBeschikbaarheid.app"
18+
BlueprintName = "iosApp"
19+
ReferencedContainer = "container:iosApp.xcodeproj">
20+
</BuildableReference>
21+
</BuildActionEntry>
22+
</BuildActionEntries>
23+
</BuildAction>
24+
<TestAction
25+
buildConfiguration = "Debug"
26+
selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
27+
selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
28+
shouldUseLaunchSchemeArgsEnv = "YES"
29+
shouldAutocreateTestPlan = "YES">
30+
</TestAction>
31+
<LaunchAction
32+
buildConfiguration = "Debug"
33+
selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
34+
selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
35+
launchStyle = "0"
36+
useCustomWorkingDirectory = "NO"
37+
ignoresPersistentStateOnLaunch = "NO"
38+
debugDocumentVersioning = "YES"
39+
debugServiceExtension = "internal"
40+
allowLocationSimulation = "YES">
41+
<BuildableProductRunnable
42+
runnableDebuggingMode = "0">
43+
<BuildableReference
44+
BuildableIdentifier = "primary"
45+
BlueprintIdentifier = "16DC6CBDD98FF169D631ACA0"
46+
BuildableName = "OVfietsBeschikbaarheid.app"
47+
BlueprintName = "iosApp"
48+
ReferencedContainer = "container:iosApp.xcodeproj">
49+
</BuildableReference>
50+
</BuildableProductRunnable>
51+
</LaunchAction>
52+
<ProfileAction
53+
buildConfiguration = "Release"
54+
shouldUseLaunchSchemeArgsEnv = "YES"
55+
savedToolIdentifier = ""
56+
useCustomWorkingDirectory = "NO"
57+
debugDocumentVersioning = "YES">
58+
</ProfileAction>
59+
<AnalyzeAction
60+
buildConfiguration = "Debug">
61+
</AnalyzeAction>
62+
<ArchiveAction
63+
buildConfiguration = "Release"
64+
revealArchiveInOrganizer = "YES">
65+
</ArchiveAction>
66+
</Scheme>

0 commit comments

Comments
 (0)