CodeQL updates #197
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Does security scanning of the raw TS and of compiled Java. No Swift support | |
| # except on macOS runners. | |
| name: "CodeQL" | |
| on: | |
| push: | |
| branches: [main, ] | |
| pull_request: | |
| # The branches below must be a subset of the branches above | |
| branches: [main] | |
| schedule: | |
| - cron: '0 5 * * 0' | |
| jobs: | |
| analyse-ts: | |
| name: Analyse TypeScript | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '22' | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| # We must fetch at least the immediate parents so that if this is | |
| # a pull request then we can checkout the head. | |
| fetch-depth: 2 | |
| - name: Globally install Ionic and Capacitor | |
| run: npm install -g @ionic/cli @capacitor/cli | |
| - name: Install dependencies | |
| run: npm install | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| build-mode: none | |
| languages: javascript # includes TS | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v3 | |
| analyse-java: | |
| name: Analyse Java | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Setup Java JDK | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'adopt' | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '22' | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 2 | |
| - name: Globally install Ionic and Capacitor | |
| run: npm install -g @ionic/cli @capacitor/cli | |
| - name: Install dependencies | |
| run: npm install | |
| - name: Ionic build android | |
| run: ionic cap build android --no-open | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| build-mode: autobuild | |
| languages: java | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v3 |