nightly-codeql-analysis.yml 1.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041
  1. name: Nightly CodeQL analysis
  2. on:
  3. workflow_dispatch:
  4. schedule:
  5. - cron: '30 1 * * *'
  6. jobs:
  7. analyze:
  8. runs-on: ubuntu-latest
  9. steps:
  10. - uses: actions/checkout@v3
  11. - name: Setup Java 17
  12. uses: actions/setup-java@v2
  13. with:
  14. distribution: temurin
  15. java-version: 17
  16. - name: Initialize CodeQL
  17. uses: github/codeql-action/init@v1
  18. with:
  19. languages: java
  20. - uses: gradle/gradle-build-action@v2
  21. env:
  22. # see https://github.com/github/codeql-action/issues/972
  23. JAVA_TOOL_OPTIONS: "--add-opens=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED"
  24. with:
  25. # skipping build cache is needed so that all modules will be analyzed
  26. arguments: assemble --no-build-cache
  27. - name: Perform CodeQL Analysis
  28. uses: github/codeql-action/analyze@v1
  29. issue:
  30. name: Open issue on failure
  31. needs: analyze
  32. if: failure()
  33. uses: ./.github/workflows/reusable-create-issue-for-failure.yml