This is an automated email from the ASF dual-hosted git repository.
wuzhiguo pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/bigtop-manager.git
The following commit(s) were added to refs/heads/main by this push:
new 0ec263ed BIGTOP-4353: Add CodeQL Check (#172)
0ec263ed is described below
commit 0ec263ed262a32cf0b9410ac7c46a76b2bf779a3
Author: ChunFuWu <[email protected]>
AuthorDate: Sat Feb 8 22:08:08 2025 +0800
BIGTOP-4353: Add CodeQL Check (#172)
---
.github/workflows/codeql.yaml | 77 +++++++++++++++++++++++++++++++++++++++++++
1 file changed, 77 insertions(+)
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
new file mode 100644
index 00000000..606225b7
--- /dev/null
+++ b/.github/workflows/codeql.yaml
@@ -0,0 +1,77 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+name: "CodeQL"
+
+on:
+ push:
+ branches: [ "main" ]
+ pull_request:
+ branches: [ "main" ]
+
+jobs:
+ analyze:
+ name: CodeQL Analyze
+ runs-on: ubuntu-latest
+ timeout-minutes: 120
+ env:
+ JAVA_TOOL_OPTIONS: -Xmx2G -Xms2G -DskipTests -Dmaven.test.skip=true
-Dmaven.test.skip=true -Dlicense.skipAddThirdParty=true -Dhttp.keepAlive=false
-Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false
-Dmaven.wagon.http.retryHandler.count=3
-Dmaven.wagon.httpconnectionManager.ttlSeconds=120
+ permissions:
+ # required for all workflows
+ security-events: write
+ # required to fetch internal or private CodeQL packs
+ packages: read
+ # only required for workflows in private repositories
+ actions: read
+ contents: read
+ strategy:
+ fail-fast: false
+ matrix:
+ java: ['17']
+ include:
+ - language: java-kotlin
+ - language: javascript-typescript
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v4
+ with:
+ submodules: true
+ - name: Set JDK
+ uses: actions/setup-java@v4
+ with:
+ distribution: 'temurin'
+ java-version: ${{ matrix.java }}
+ cache: 'maven'
+ - name: Cache local Maven repository
+ uses: actions/cache@v4
+ with:
+ path: ~/.m2/repository
+ key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+ restore-keys: |
+ ${{ runner.os }}-maven-
+ - name: CodeQL Init
+ uses: github/codeql-action/init@v3
+ with:
+ languages: ${{ matrix.language }}
+ - name: CodeQL Autobuild
+ uses: github/codeql-action/autobuild@v3
+ - name: CodeQL Perform Analysis
+ uses: github/codeql-action/analyze@v3
+ with:
+ category: "/language:${{matrix.language}}"
\ No newline at end of file
