codeql.yaml

---
name: codeQL

on:
  push:
    branches:
      - main
      - development/2.1
  pull_request:
    branches:
      - main
      - development/2.1
  workflow_dispatch:

jobs:
  analyze:
    name: Static analysis with CodeQL
    permissions:
      actions: read
      contents: read
      security-events: write
    runs-on: ubuntu-latest
    env:
      NEXUS_UNAME: ${{ secrets.NEXUS_USERNAME }}
      NEXUS_PWD: ${{ secrets.NEXUS_PASSWORD }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: java

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: "corretto"
          java-version: "17"

      - name: Setup Gradle
        uses: gradle/gradle-build-action@v3
        with:
          gradle-version: 7.3
      
      - name: Execute build with Gradle wrapper
        run: ./gradlew build -PsonatypeUsername=$NEXUS_UNAME -PsonatypePassword=$NEXUS_PWD

      - name: Build and analyze
        uses: github/codeql-action/analyze@v3