codeql-analysis.yml

name: "CodeQL"

on:
  push:
    branches: [ "develop" ]
  pull_request:
    branches: [ "develop" ]
  schedule:
    - cron: '38 22 * * 1'

jobs:
  analyze:
    name: Analyze
    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
    timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
    permissions:
      actions: read
      contents: read
      security-events: write

    strategy:
      fail-fast: false
      matrix:
        language: [ 'java-kotlin' ]

    steps:
    - name: Checkout repository
      uses: actions/checkout@v4

    - name: Generate Maven settings
      uses: whelk-io/maven-settings-xml-action@v22
      with:
        repositories: >
          [
            {
              "id": "central",
              "url": "https://repo1.maven.org/maven2"
            },
            {
              "id": "github",
              "url": "https://maven.pkg.github.com/bitwarden/sdk",
              "releases": {
                  "enabled": "true"
              },
              "snapshots": {
                  "enabled": "true"
              }
            }
          ]
        servers: >
          [
            {
              "id": "github",
              "username": "${env.PACKAGES_USER}",
              "password": "${env.PACKAGES_ACCESS_TOKEN}",
              "configuration": {
                "httpConfiguration": {
                  "all": {
                    "usePreemptive": "true"
                  }
                }
              }
            }
          ]
        profiles: >
          [
            {
              "id": "github"
            }
          ]
        active_profiles: >
          [
            "github"
          ]
        output_file: .m2/settings.xml

    - name: Initialize CodeQL
      uses: github/codeql-action/init@v3
      with:
        languages: java

    - name: Setup Java
      uses: actions/setup-java@v4
      with:
        distribution: 'temurin'
        java-version: '20'
        overwrite-settings: 'false'

    - name: Check
      run: cat ${{ github.workspace }}/.m2/settings.xml

    - name: Build
      run: mvn -s ${{ github.workspace }}/.m2/settings.xml -B compile
      env:
        PACKAGES_USER: ${{ secrets.PACKAGES_USER }}
        PACKAGES_ACCESS_TOKEN: ${{ secrets.PACKAGES_ACCESS_TOKEN }}

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@v3