name: 'CodeQL'

on:

push:

branches: [main]

schedule:

- cron: '17 23 * * 3'

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}

cancel-in-progress: true

jobs:

analyze:

name: Analyze

runs-on: macos-15

env:

GRADLE_ENCRYPTION_KEY: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

steps:

- name: Checkout Repo

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

submodules: 'recursive'

- name: Setup Java Version

uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5

with:

distribution: 'temurin'

java-version: '17'

- name: Setup Gradle

uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0

with:

cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

- name: Initialize CodeQL

uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # pin@v2

with:

languages: 'java'

- name: Build Java

run: |

./gradlew buildForCodeQL --no-build-cache

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # pin@v2