codeql.yaml

---
name: "CodeQL"
"on":
  push:
    branches:
    - "main"
  pull_request:
    branches:
    - "main"
jobs:
  codeql:
    runs-on: "ubuntu-latest"
    timeout-minutes: 30
    env:
      GH_TOKEN: "${{ secrets.GH_TOKEN }}"
    permissions:
      actions: "read"
      contents: "read"
      security-events: "write"
    strategy:
      fail-fast: false
      matrix:
        language:
        - "java"
    steps:
    - name: "Checkout repository"
      uses: "actions/checkout@v4"
    - name: "Initialize CodeQL"
      uses: "github/codeql-action/init@v3"
      with:
        languages: "${{ matrix.language }}"
    - name: "Set up JDK 23"
      uses: "actions/setup-java@v4"
      with:
        distribution: "zulu"
        java-version: "23"
        java-package: "jdk"
        cache: "maven"
    - run: "make 'M=mvn -s settings.xml' build"
    - name: "Perform CodeQL Analysis"
      uses: "github/codeql-action/analyze@v3"