diff --git a/.github/workflows/yaml-validator.yaml b/.github/workflows/yaml-validator.yaml index 4e05095..7f0dc49 100644 --- a/.github/workflows/yaml-validator.yaml +++ b/.github/workflows/yaml-validator.yaml @@ -1,10 +1,9 @@ -name: "CodeQL" - -on: [push, pull_request] - +name: CodeQL +on: + - push + - pull_request permissions: contents: read - jobs: analyze: name: Analyze @@ -13,36 +12,25 @@ jobs: actions: read contents: read security-events: write - strategy: fail-fast: false matrix: - language: [ 'java' ] - # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] - # Use only 'java' to analyze code written in Java, Kotlin or both - # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both - # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support - + language: + - java steps: - - name: Checkout repository - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - with: - submodules: 'true' - - - name: Setup java env - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0 - with: - distribution: 'corretto' - java-version: '17' - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2.21.0 - with: - languages: ${{ matrix.language }} - # If you wish to specify custom queries, you can do so here or in a config file. - # By default, queries listed here will override any specified in a config file. - # Prefix the list here with "+" to use these queries and those in the config file. - - # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs - # queries: security-extended,security-and-quality + - name: Checkout repository + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 + with: + submodules: "true" + - name: Setup java env + uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 + with: + distribution: corretto + java-version: "17" + - name: Initialize CodeQL + env: + GH_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }} + GH_USER: ${{ secrets.DOCKERHUB_USERNAME }} + uses: github/codeql-action/init@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 + with: + languages: ${{ matrix.language }}