Update yaml-validator.yaml

opensourceways · Jul 30, 2024 · 6698c4b · 6698c4b
1 parent 596def0
commit 6698c4b
Showing 1 changed file with 22 additions and 34 deletions.
diff --git a/.github/workflows/yaml-validator.yaml b/.github/workflows/yaml-validator.yaml
@@ -1,10 +1,9 @@
-name: "CodeQL"
-
-on: [push, pull_request]
-
+name: CodeQL
+on:
+  - push
+  - pull_request
 permissions:
   contents: read
-
 jobs:
   analyze:
     name: Analyze
@@ -13,36 +12,25 @@ jobs:
       actions: read
       contents: read
       security-events: write
-
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'java' ]
-        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
-        # Use only 'java' to analyze code written in Java, Kotlin or both
-        # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
-        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
-
+        language:
+          - java
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
-      with:
-        submodules: 'true'
-
-    - name: Setup java env
-      uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0
-      with:
-        distribution: 'corretto'
-        java-version: '17'
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2.21.0
-      with:
-        languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-
-        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-        # queries: security-extended,security-and-quality
+      - name: Checkout repository
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+        with:
+          submodules: "true"
+      - name: Setup java env
+        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2
+        with:
+          distribution: corretto
+          java-version: "17"
+      - name: Initialize CodeQL
+        env:
+          GH_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+          GH_USER: ${{ secrets.DOCKERHUB_USERNAME }}
+        uses: github/codeql-action/init@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8
+        with:
+          languages: ${{ matrix.language }}