Skip to content
This repository was archived by the owner on Jan 31, 2026. It is now read-only.
Merged
76 changes: 76 additions & 0 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,76 @@
name: "CodeQL Advanced"

on:
push:
branches: [master]
pull_request:
branches: [master]
schedule:
- cron: "42 9 * * 1"

jobs:
analyze:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
permissions:
security-events: write
packages: read
actions: read
contents: read

strategy:
fail-fast: false
matrix:
include:
- language: java-kotlin
build-mode: manual
- language: javascript-typescript
build-mode: none
- language: ruby
build-mode: none

steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Set up Java 17
if: matrix.language == 'java-kotlin'
uses: actions/setup-java@v4
with:
distribution: "temurin"
java-version: "17"

- name: Set up Gradle
if: matrix.language == 'java-kotlin'
uses: gradle/actions/setup-gradle@v4
with:
gradle-version: "8.10.2"

- name: Set up Node.js
if: matrix.language == 'java-kotlin'
uses: actions/setup-node@v4
with:
node-version: "lts/*"
cache: "yarn"

- name: Install dependencies
if: matrix.language == 'java-kotlin'
run: |
yarn install --frozen-lockfile
cd example && yarn install --frozen-lockfile

- name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}

- name: Build Android
if: matrix.build-mode == 'manual'
run: gradle --no-daemon assembleDebug
working-directory: example/android

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4
with:
category: "/language:${{ matrix.language }}"