codeql-daily.yml 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. name: CodeQL (daily)
  2. on:
  3. schedule:
  4. # daily at 1:30 UTC
  5. - cron: "30 1 * * *"
  6. workflow_dispatch:
  7. jobs:
  8. analyze:
  9. runs-on: ubuntu-latest
  10. steps:
  11. - uses: actions/checkout@v4
  12. - name: Free disk space
  13. run: .github/scripts/gha-free-disk-space.sh
  14. - name: Set up Java 17
  15. uses: actions/setup-java@v4
  16. with:
  17. distribution: temurin
  18. java-version: 17.0.6
  19. - name: Initialize CodeQL
  20. uses: github/codeql-action/init@v3
  21. with:
  22. languages: java
  23. # using "latest" helps to keep up with the latest Kotlin support
  24. # see https://github.com/github/codeql-action/issues/1555#issuecomment-1452228433
  25. tools: latest
  26. - uses: gradle/gradle-build-action@v2
  27. with:
  28. # skipping build cache is needed so that all modules will be analyzed
  29. arguments: assemble -x javadoc --no-build-cache --no-daemon
  30. - name: Perform CodeQL analysis
  31. uses: github/codeql-action/analyze@v3
  32. workflow-notification:
  33. needs:
  34. - analyze
  35. if: always()
  36. uses: ./.github/workflows/reusable-workflow-notification.yml
  37. with:
  38. success: ${{ needs.analyze.result == 'success' }}