.github/workflows/codeql-analysis.yml

# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

name: "CodeQL"

on:
  push:
    branches:
      - master
    paths:
      - '**/*.java'
      - '.github/workflows/codeql-analysis.yml'
  pull_request:
    paths:
      - '**/*.java'
      - '.github/workflows/codeql-analysis.yml'

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    if: (github.repository == 'apache/shenyu')

    strategy:
      fail-fast: false
      matrix:
        language: ['java']

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Set up JDK 17
        if: github.event_name != 'pull_request'
        uses: ./actions/setup-java-with-retry
        with:
          java-version: 17
          distribution: 'temurin'

      - name: Restore ShenYu Maven Repos
        if: github.event_name != 'pull_request'
        id: restore-maven-cache
        uses: actions/cache/restore@v3
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
          restore-keys: |
            ${{ runner.os }}-maven-

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: ${{ matrix.language }}
          build-mode: ${{ github.event_name == 'pull_request' && 'none' || 'manual' }}

      - name: Build for CodeQL analysis
        if: github.event_name != 'pull_request'
        run: |
          ./mvnw -B -ntp -T 1C package \
            -DskipTests \
            -DskipRemoteResources=true \
            -Dfindbugs.skip=true \
            -Dcheckstyle.skip=true \
            -Dpmd.skip=true \
            -Dspotbugs.skip=true \
            -Denforcer.skip=true \
            -Dmaven.javadoc.skip=true \
            -Dlicense.skip=true \
            -Drat.skip=true \
            -Dspotless.check.skip=true \
            -Djacoco.skip=true

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3