.github/workflows/codeql-analysis.yml

   1 name: "CodeQL"
   2
   3 on:
   4   push:
   5     branches: [ master ]
   6   pull_request:
   7     # The branches below must be a subset of the branches above
   8     branches: [ master ]
   9   schedule:
  10     - cron: '24 16 * * 2'
  11
  12 jobs:
  13   analyze:
  14     name: Analyze
  15     runs-on: ubuntu-latest
  16     permissions:
  17       actions: read
  18       contents: read
  19       security-events: write
  20
  21     strategy:
  22       fail-fast: false
  23       matrix:
  24         language: [ 'java' ]
  25
  26     steps:
  27     - name: Checkout repository
  28       uses: actions/checkout@v3
  29
  30     - name: Initialize CodeQL
  31       uses: github/codeql-action/init@v1
  32       with:
  33         languages: ${{ matrix.language }}
  34
  35     - name: Autobuild
  36       uses: github/codeql-action/autobuild@v1
  37
  38     - name: Perform CodeQL Analysis
  39       uses: github/codeql-action/analyze@v1