pulse

1name: CodeQL Analysis
2 
3on:
4  push:
5    branches: [main]
6  pull_request:
7    branches: [main]
8  schedule:
9    - cron: "0 6 * * 1"
10 
11jobs:
12  analyze:
13    name: Analyze (Java/Kotlin)
14    runs-on: ubuntu-latest
15    permissions:
16      actions: read
17      contents: read
18      security-events: write
19 
20    strategy:
21      fail-fast: false
22      matrix:
23        language: ["java-kotlin"]
24 
25    steps:
26      - name: Checkout sources
27        uses: actions/checkout@v4
28 
29      - name: Initialize CodeQL
30        uses: github/codeql-action/init@v4
31        with:
32          languages: ${{ matrix.language }}
33 
34      - name: Setup Java 25
35        uses: actions/setup-java@v5
36        with:
37          distribution: temurin
38          java-version: 25
39 
40      - name: Grant execute permission for Gradlew
41        run: chmod +x gradlew
42 
43      - name: Build with Gradle
44        run: ./gradlew build
45 
46      - name: Perform CodeQL Analysis
47        uses: github/codeql-action/analyze@v4
48        with:
49          category: "/language:${{ matrix.language }}"
50