CodeQL #538

	name: "CodeQL"

	on:
	push:
	branches: [ "main", "develop" ]
	pull_request:

	schedule:
	- cron: '19 1 * * 3'

	jobs:
	analyze_java:
	name: Analyze Java
	runs-on: ubuntu-latest

	permissions:
	actions: read
	contents: read
	security-events: write

	strategy:
	fail-fast: false

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3

	- name: Validate Gradle Wrapper
	uses: gradle/wrapper-validation-action@v1

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v2
	with:
	languages: java

	- name: Checkout submodules
	run: git submodule update --init --recursive

	- name: Set up JDK 17
	uses: actions/setup-java@v3
	with:
	java-version: '17'
	distribution: 'temurin'
	cache: gradle

	- name: Grant execute permission for gradlew
	run: chmod +x gradlew

	- name: Gradle :core:assemble
	run: ./gradlew :core:assemble -x validateSigningProductionRelease

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v2
	with:
	category: "/language:Java"

Provide feedback