Skip to content

CodeQL (daily)

CodeQL (daily) #554

Workflow file for this run

name: CodeQL (daily)
on:
schedule:
# Daily at 01:30 (UTC)
- cron: '30 1 * * *'
workflow_dispatch:
permissions:
contents: read
jobs:
analyze:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Set up Java 17
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
with:
distribution: temurin
java-version: 17
- name: Initialize CodeQL
uses: github/codeql-action/init@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
with:
languages: java
# using "latest" helps to keep up with the latest Kotlin support
# see https://github.com/github/codeql-action/issues/1555#issuecomment-1452228433
tools: latest
- name: Set up gradle
uses: gradle/actions/setup-gradle@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
- name: Assemble
# skipping build cache is needed so that all modules will be analyzed
run: ./gradlew assemble --no-build-cache
- name: Perform CodeQL analysis
uses: github/codeql-action/analyze@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
workflow-notification:

Check failure on line 42 in .github/workflows/codeql-daily.yml

View workflow run for this annotation

GitHub Actions / CodeQL (daily)

Invalid workflow file

The workflow is not valid. .github/workflows/codeql-daily.yml (Line: 42, Col: 3): Error calling workflow 'open-telemetry/opentelemetry-java-examples/.github/workflows/reusable-workflow-notification.yml@f164e6344322ed53e9d839e5c4b66c4a26d2b692'. The nested job 'workflow-notification' is requesting 'issues: write', but is only allowed 'issues: none'.
needs:
- analyze
if: always()
uses: ./.github/workflows/reusable-workflow-notification.yml
with:
success: ${{ needs.analyze.result == 'success' }}