Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 11 additions & 7 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,12 +2,12 @@ name: "CodeQL"

on:
push:
branches: [ "master" ]
branches: ["master"]
pull_request:
# The branches below must be a subset of the branches above
branches: [ "master" ]
branches: ["master"]
schedule:
- cron: '22 11 * * 1'
- cron: '22 11 * * 1'

jobs:
analyze:
Expand All @@ -21,15 +21,15 @@ jobs:
strategy:
fail-fast: false
matrix:
language: [ 'java' ]
language: ['java']

steps:

# Checkout
- name: Checkout repository
uses: actions/checkout@v3

# Initializes the CodeQL tools for scanning.
- uses: clonedSemicolon/setup-strace@v13
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
Expand All @@ -40,14 +40,18 @@ jobs:

# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
# queries: security-extended,security-and-quality

# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun

# Compile
- run: ant -buildfile build.xml compile

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
with:
category: "/language:${{matrix.language}}"
- name: Upload strace artifacts
uses: actions/upload-artifact@v4
with:
name: strace-logs-${{ github.job }}-${{ matrix.flavor || 'lint' }}-${{ github.run_id }}-${{ github.run_attempt }}-${{ strategy.job-index || 0 }}
path: /home/runner/strace_logs/
46 changes: 26 additions & 20 deletions .github/workflows/pmd.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ name: pmd

on:
push:
branches: [ "master" ]
branches: ["master"]
pull_request:
branches: [ "master" ]
branches: ["master"]
schedule:
- cron: '25 21 * * 2'
- cron: '25 21 * * 2'

permissions:
contents: read
Expand All @@ -24,20 +24,26 @@ jobs:
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Set up JDK 11
uses: actions/setup-java@v3
with:
java-version: '11'
distribution: 'temurin'
- name: Run PMD
id: pmd
uses: pmd/pmd-github-action@v2
with:
rulesets: 'ruleset.xml'
sourcePath: 'src/main'
analyzeModifiedFilesOnly: false
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: pmd-report.sarif
- uses: actions/checkout@v3
- uses: clonedSemicolon/setup-strace@v13
- name: Set up JDK 11
uses: actions/setup-java@v3
with:
java-version: '11'
distribution: 'temurin'
- name: Run PMD
id: pmd
uses: pmd/pmd-github-action@v2
with:
rulesets: 'ruleset.xml'
sourcePath: 'src/main'
analyzeModifiedFilesOnly: false
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: pmd-report.sarif
- name: Upload strace artifacts
uses: actions/upload-artifact@v4
with:
name: strace-logs-${{ github.job }}-${{ matrix.flavor || 'lint' }}-${{ github.run_id }}-${{ github.run_attempt }}-${{ strategy.job-index || 0 }}
path: /home/runner/strace_logs/