Bumps the all-actions group with 1 update in the / directory: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 4.37.7 to 4.37.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.37.8</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="db488ddef3"><code>db488dd</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4102">#4102</a> from github/update-v4.37.8-9ee088e13</li> <li><a href="1845f5ba8b"><code>1845f5b</code></a> Update changelog for v4.37.8</li> <li><a href="9ee088e136"><code>9ee088e</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4080">#4080</a> from github/henrymercer/studious-giggle</li> <li><a href="1aef003397"><code>1aef003</code></a> Address review feedback on overlay disk flags</li> <li><a href="508b83bc41"><code>508b83b</code></a> Merge main into overlay minimum disk feature branch</li> <li><a href="d97b3428e8"><code>d97b342</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4098">#4098</a> from github/mbg/permission-error-as-configuration-error</li> <li><a href="47fa622223"><code>47fa622</code></a> Make <code>EACCES</code> a <code>ConfigurationError</code></li> <li><a href="45693cc688"><code>45693cc</code></a> Refactor <code>ENOSPC</code> check into <code>isDiskConfigurationError</code> function</li> <li><a href="c2fd8f54d1"><code>c2fd8f5</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4081">#4081</a> from github/mario-campos/version-cache-to-disk</li> <li><a href="c56f48e9bd"><code>c56f48e</code></a> Log unexpected conditions during caching CLI output</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v4.37.7...v4.37.8">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
57 lines
1.4 KiB
YAML
57 lines
1.4 KiB
YAML
name: "CodeQL Advanced"
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [ "main" ]
|
|
schedule:
|
|
- cron: '0 7 * * 1' # Monday 8:00 CET (7:00 UTC)
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
JAVA_VERSION: 21
|
|
JAVA_DISTRIBUTION: temurin
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
permissions:
|
|
security-events: write
|
|
contents: read
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Set up JDK ${{ env.JAVA_VERSION }}
|
|
uses: actions/setup-java@v5
|
|
with:
|
|
distribution: ${{ env.JAVA_DISTRIBUTION }}
|
|
java-version: ${{ env.JAVA_VERSION }}
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v4.37.8
|
|
with:
|
|
languages: java-kotlin
|
|
build-mode: manual
|
|
|
|
- name: Setup Gradle
|
|
uses: gradle/actions/setup-gradle@v6.3.0
|
|
with:
|
|
validate-wrappers: true
|
|
cache-read-only: true
|
|
|
|
- name: Build Kotlin sources
|
|
run: |
|
|
./gradlew compileKotlinJvm :conformance-test:compileKotlin \
|
|
-Pkotlin.incremental=false \
|
|
--no-daemon --rerun-tasks --stacktrace
|
|
|
|
- name: Analyze
|
|
uses: github/codeql-action/analyze@v4.37.8
|
|
with:
|
|
category: '/language:java-kotlin'
|