From 312f92d21a5b8925496d5015357c257dace3a028 Mon Sep 17 00:00:00 2001 From: Harsh Shandilya Date: Sat, 13 Apr 2024 14:45:08 +0530 Subject: refactor(ci): introduce a composite workflow --- .github/workflows/codeql_analysis.yml | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) (limited to '.github/workflows/codeql_analysis.yml') diff --git a/.github/workflows/codeql_analysis.yml b/.github/workflows/codeql_analysis.yml index bc849723..2ba0a94d 100644 --- a/.github/workflows/codeql_analysis.yml +++ b/.github/workflows/codeql_analysis.yml @@ -21,14 +21,8 @@ jobs: contents: read security-events: write steps: - - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - - name: Set up JDK - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 - with: - distribution: temurin - java-version: 20 + - name: Setup build environment + uses: android-password-store/android-password-store/.github/reusable-workflows/setup-gradle@develop - name: Initialize CodeQL uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10 @@ -38,11 +32,8 @@ jobs: queries: +security-extended - name: Build project - uses: gradle/actions/setup-gradle@6cec5d49d4d6d4bb982fbed7047db31ea6d38f11 # v3 - with: - gradle-home-cache-cleanup: true - cache-read-only: true - arguments: assembleNonFreeRelease + shell: bash + run: ./gradlew assembleNonFreeRelease - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10 -- cgit v1.2.3