Skip to content

fix: re-pin context7 query-docs tool after upstream 3.2.3 release (#403) #286

fix: re-pin context7 query-docs tool after upstream 3.2.3 release (#403)

fix: re-pin context7 query-docs tool after upstream 3.2.3 release (#403) #286

Workflow file for this run

name: CodeQL
on:
push:
branches: [main]
pull_request:
branches: [main]
schedule:
- cron: '23 7 * * 1'
workflow_dispatch:
permissions:
contents: read
security-events: write
actions: read
concurrency:
group: codeql-${{ github.ref }}
cancel-in-progress: true
jobs:
analyze:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- language: java-kotlin
build-mode: manual
- language: javascript-typescript
build-mode: none
- language: python
build-mode: none
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Set up JDK 21
if: matrix.language == 'java-kotlin'
uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
with:
distribution: temurin
java-version: '21'
- name: Set up Gradle
if: matrix.language == 'java-kotlin'
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
with:
gradle-version: '8.14.3'
- name: Initialize CodeQL
uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
config-file: ./.github/codeql/codeql-config.yml
- name: Manual build (Java)
if: matrix.build-mode == 'manual'
working-directory: runtimes/java
# `clean` + `--no-build-cache` force javac to actually run so the CodeQL
# Java extractor sees source compilations. Without these, a cache hit on
# :compileJava produces an empty database and analysis fails.
run: gradle clean build -x test --no-build-cache --no-daemon
- name: Perform CodeQL analysis
uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with:
category: "/language:${{ matrix.language }}"