source: josm/trunk/.github/workflows/codeql-analysis.yml@ 19504

Last change on this file since 19504 was 19504, checked in by stoecker, 3 days ago

use java 21 for spotbugs and codeql

File size: 1.1 KB
Line 
1name: "CodeQL"
2
3on:
4 push:
5 branches: [ master ]
6 pull_request:
7 # The branches below must be a subset of the branches above
8 branches: [ master ]
9 schedule:
10 - cron: '45 4 * * 1'
11
12jobs:
13 analyze:
14 name: Analyze
15 runs-on: ubuntu-latest
16 permissions:
17 security-events: write
18
19 strategy:
20 fail-fast: false
21 matrix:
22 language: [ 'java' ]
23
24 steps:
25 - name: Checkout repository
26 uses: actions/checkout@v4
27 with:
28 fetch-depth: 256
29
30 - name: Cache
31 uses: actions/cache@v4
32 with:
33 path: |
34 ~/.ivy2/cache/
35 ~/work/josm/josm/tools/
36 key: ${{ runner.os }}-ivy2-${{ hashFiles('build.xml', 'ivy.xml', 'tools/ivy.xml') }}
37
38 - name: Initialize CodeQL
39 uses: github/codeql-action/init@v3
40 with:
41 languages: ${{ matrix.language }}
42
43 - name: Setup Java 21
44 uses: actions/setup-java@v4
45 with:
46 distribution: 'zulu'
47 java-version: 21
48
49 - name: Compile with Ant
50 run: |
51 ant compile extract-libraries epsg
52
53 - name: Perform CodeQL Analysis
54 uses: github/codeql-action/analyze@v3
Note: See TracBrowser for help on using the repository browser.