codeql.yml

name: CodeQL

on:
  workflow_run:
    workflows: [ Commit ]
    types:
      - completed

jobs:
  codeql:
    runs-on: ubuntu-22.04
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Validate Gradle wrapper
        uses: gradle/actions/wrapper-validation@v4

      - name: Setup JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: 21
          distribution: temurin

      - name: Gradle cache
        uses: actions/cache/restore@v4
        with:
          fail-on-cache-miss: true
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
            .gradle
          key: ${{ runner.os }}-gradle-${{ hashFiles('gradle/gradle-wrapper.properties', 'settings.gradle.kts', 'build.gradle.kts', 'gradle.properties') }}

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: java

      - name: Initialize build environment
        run: ./gradlew

      - name: Build
        run: ./gradlew assemble -x checkLicenses

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3