codeql-daily.yml 1.1 KB

1234567891011121314151617181920212223242526272829303132333435363738394041
  1. name: CodeQL (daily)
  2. on:
  3. schedule:
  4. - cron: '30 1 * * *'
  5. workflow_dispatch:
  6. jobs:
  7. analyze:
  8. runs-on: ubuntu-latest
  9. steps:
  10. - uses: actions/checkout@v3
  11. - name: Set up Java 17
  12. uses: actions/setup-java@v3
  13. with:
  14. distribution: temurin
  15. java-version: 17
  16. - name: Initialize CodeQL
  17. uses: github/codeql-action/init@v2
  18. with:
  19. languages: java
  20. - uses: gradle/gradle-build-action@v2
  21. env:
  22. # see https://github.com/github/codeql-action/issues/972
  23. JAVA_TOOL_OPTIONS: "--add-opens=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED"
  24. with:
  25. # skipping build cache is needed so that all modules will be analyzed
  26. arguments: assemble --no-build-cache
  27. - name: Perform CodeQL analysis
  28. uses: github/codeql-action/analyze@v2
  29. open-issue-on-failure:
  30. # open an issue on failure because it can be easy to miss CI failure notifications
  31. needs: analyze
  32. if: failure()
  33. uses: ./.github/workflows/reusable-open-issue-on-failure.yml