CodeQL #20

	name: 'CodeQL'

	on:
	push:
	branches: [main]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [main]
	schedule:
	- cron: '17 23 * * 3'

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	analyze:
	name: Analyze
	runs-on: macos-15

	env:
	GRADLE_ENCRYPTION_KEY: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

	steps:
	- name: Checkout Repo
	uses: actions/checkout@v4
	with:
	submodules: 'recursive'

	- name: Setup Java Version
	uses: actions/setup-java@v4
	with:
	distribution: 'temurin'
	java-version: '17'

	- name: Setup Gradle
	uses: gradle/actions/setup-gradle@4a417b5b1a01db0b076987546b67f8de18e7d340 # pin@v3
	with:
	gradle-home-cache-cleanup: true
	cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

	- name: Initialize CodeQL
	uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # pin@v2
	with:
	languages: 'java'

	- name: Build Java
	run: \|
	./gradlew buildForCodeQL

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # pin@v2

Provide feedback