Pārlūkot izejas kodu

CI: Scan Java source files with CodeQL (#2898)

* Scan Java code with CodeQL

* REMOVE ME: Trigger workflow run
Jochen Schalanda 2 gadi atpakaļ
vecāks
revīzija
d6571ec7ae
2 mainītis faili ar 10 papildinājumiem un 2 dzēšanām
  1. 10 1
      .github/workflows/codeql-analysis.yml
  2. 0 1
      kafka-ui-api/pom.xml

+ 10 - 1
.github/workflows/codeql-analysis.yml

@@ -20,6 +20,8 @@ on:
     paths:
     paths:
     - 'kafka-ui-contract/**'
     - 'kafka-ui-contract/**'
     - 'kafka-ui-react-app/**'
     - 'kafka-ui-react-app/**'
+    - 'kafka-ui-api/**'
+    - 'kafka-ui-serde-api/**'
   schedule:
   schedule:
     - cron: '39 15 * * 6'
     - cron: '39 15 * * 6'
 
 
@@ -31,7 +33,7 @@ jobs:
     strategy:
     strategy:
       fail-fast: false
       fail-fast: false
       matrix:
       matrix:
-        language: [ 'javascript' ]
+        language: [ 'javascript', 'java' ]
         # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
         # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
         # Learn more:
         # Learn more:
         # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
         # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
@@ -50,6 +52,13 @@ jobs:
         # Prefix the list here with "+" to use these queries and those in the config file.
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
 
+    - name: Set up JDK
+      uses: actions/setup-java@v3
+      with:
+          java-version: '17'
+          distribution: 'zulu'
+          cache: 'maven'
+
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
     - name: Autobuild

+ 0 - 1
kafka-ui-api/pom.xml

@@ -490,5 +490,4 @@
         </profile>
         </profile>
     </profiles>
     </profiles>
 
 
-
 </project>
 </project>