name: CodeQL

on:

push:

branches: [ "main" ]

pull_request:

branches: [ "main" ]

schedule:

- cron: '37 23 * * 6'

permissions: {}

jobs:

analyze:

name: Analyze (${{ matrix.language }})

runs-on: ubuntu-latest

permissions:

security-events: write

strategy:

fail-fast: false

matrix:

include:

- language: actions

build-mode: none

- language: java-kotlin

build-mode: autobuild

steps:

- name: Checkout repository

uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

- name: Initialize CodeQL

uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3

with:

languages: ${{ matrix.language }}

build-mode: ${{ matrix.build-mode }}

- name: Set up Java

if: matrix.language == 'java-kotlin'

uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0

with:

distribution: 'zulu'

java-version: '21'

cache: 'maven'

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3

with:

category: "/language:${{matrix.language}}"