Skip to content

Commit

Permalink
chore: added codeql and upadte spring to 3.2.2
Browse files Browse the repository at this point in the history
  • Loading branch information
nemo83 committed Feb 15, 2024
1 parent c33e121 commit 77d865d
Show file tree
Hide file tree
Showing 2 changed files with 60 additions and 1 deletion.
59 changes: 59 additions & 0 deletions .github/workflows/codeql.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
name: "CodeQL"

on:
push:
branches: [main]
pull_request:
branches: [main]
workflow_dispatch:

jobs:
CodeQL-Build:
# CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
runs-on: ubuntu-latest

permissions:
# required for all workflows
security-events: write

# only required for workflows in private repositories
actions: read
contents: read

steps:
- name: Checkout repository
uses: actions/checkout@v3

- name: Setup Java
uses: actions/setup-java@v3
with:
java-version: '18'
distribution: 'temurin'

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: java
# Override language selection by uncommenting this and choosing your languages
# with:
# languages: go, javascript, csharp, python, cpp, java, ruby

# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
# If this step fails, then you should remove it and run the build manually (see below).
- name: Autobuild
uses: github/codeql-action/autobuild@v2

# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun

# ✏️ If the Autobuild fails above, remove it and uncomment the following
# three lines and modify them (or add more) to build your code if your
# project uses a compiled language

#- run: |
# make bootstrap
# make release

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@
<version.maven-pmd-plugin>3.17.0</version.maven-pmd-plugin>
<version.maven-project-info-reports-plugin>3.3.0</version.maven-project-info-reports-plugin>
<version.maven-site-plugin>4.0.0-M2</version.maven-site-plugin>
<version.spring-boot>3.0.5</version.spring-boot>
<version.spring-boot>3.2.2</version.spring-boot>
<version.lombok>1.18.26</version.lombok>
<version.springdoc-openapi-ui>2.1.0</version.springdoc-openapi-ui>
<version.swagger-annotations>2.2.8</version.swagger-annotations>
Expand Down

0 comments on commit 77d865d

Please sign in to comment.