codeql.yml

name: "CodeQL"

on:
  pull_request:
    branches: [ "master" ]
    paths-ignore:
      - '**/*.md'
      - '**/*.txt'
      - '**/*.xml'
      - '**/*.json'
  schedule:
    - cron: '27 4 1 * *'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
  cancel-in-progress: true

jobs:
  analyze:
    name: Analyze Kotlin
    runs-on: 'ubuntu-latest'
    permissions:
      security-events: write
      packages: read
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: 'java-kotlin'
          build-mode: 'manual'
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '17'
      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v4
      - name: Build project
        # Gradle build cache does not work with CodeQL
        run: ./gradlew assembleDebug --no-build-cache
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3