Create codeql-no-diff.yml

Deleted:
    - name: Get changed files
      id: changed-files
      uses: tj-actions/changed-files@v44
      (.java - .xml - .properties)

if: steps.changed-files.outputs.any_changed == 'true')

    - name: No Changes Summary
      if: steps.changed-files.outputs.any_changed == 'false'
      run: |
        echo "No Java/XML/Properties files changed"
        echo "⏭CodeQL analysis skipped for performance"

Author: MissionOpen

.github/workflows/codeql-no-diff.yml

@@ -0,0 +1,63 @@
+#1) HEADER & TRIGGER
+name: "Codeql on PR / Total Scan"
+
+on:
+  pull_request:
+    branches: [ "main" ] #Se voglio triggerare su tutti i rami = branches: [ "*" ]
+
+#2) CONFIGURAZIONE JOBS
+jobs:
+  analyze:
+    name: Analyze Java - Total no Diff
+    runs-on: ubuntu-latest
+
+#3) PERMESSI - DEFINISCE COSA PUO' FARE IL WORKFLOW NEL REPOSITORY
+    permissions:
+      security-events: write # Per scrivere risultati di sicurezza
+      packages: read # Per scaricare query pack CodeQL
+      actions: read # Per leggere altri workflow
+      contents: read # Per leggere il codice del repo
+
+#4) CHECKOUT
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+#5) SETUP JAVA
+    - name: Setup Java
+      uses: actions/setup-java@v4
+      with:
+        distribution: 'temurin'
+        java-version: '21'
+
+#6) INITIALIZE CODEQL
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: java-kotlin
+        build-mode: none
+        config-file: ./.github/codeql/codeql-config.yml
+  
+#7) ANALISI CODEQL
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+
+#8) DEBUG
+    - name: Debug SARIF Path
+      run: find /home/runner/work/WebGoat/ -name "*.sarif"
+ 
+#9) UPLOAD SARIF E CREAZIONE ARTIFACT
+    - name: Upload SARIF
+      uses: actions/upload-artifact@v4
+      with:
+        name: sarif-report
+        path: /home/runner/work/WebGoat/results/java.sarif
+
+#10) SUMMARY
+    - name: Analysis Summary
+      run: |
+        echo "WebGoat CodeQL analysis completed"
+        echo "Files analyzed: ${{ steps.changed-files.outputs.all_changed_files }}"
+        echo "Language: java-kotlin"
+        
+