Skip to content

chore(deps): update github/codeql-action digest to 9e8d078 #1198

chore(deps): update github/codeql-action digest to 9e8d078

chore(deps): update github/codeql-action digest to 9e8d078 #1198

Workflow file for this run

name: "CodeQL"
on:
push:
branches:
- main
pull_request:
types:
- opened
- synchronize
- reopened
schedule:
- cron: "0 1 * * 0"
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
actions: read
contents: read
security-events: write
jobs:
analyze:
runs-on: macos-14
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- uses: ./.github/actions/sdkman
- uses: ./.github/actions/konan
- uses: ./.github/actions/xcode-select
- uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3
with:
config-file: ./.github/codeql/codeql-config.yml
- uses: ruby/setup-ruby@217c988b8c2bf2bacb2d5c78a7e7b18f8c34daed # v1.200.0
with:
bundler-cache: true
- uses: bazelbuild/setup-bazelisk@b39c379c82683a5f25d34f0d062761f62693e0b2 # v3
- run: make bootstrap-submodule
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
with:
path: |
build/bazel
Framework/Tink.xcframework
key: v2-bazel-${{ runner.os }}-${{ hashFiles('.git/modules/TinkStub/HEAD') }}
- uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3
id: framework
with:
files: "Framework/Tink.xcframework"
- uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3
with:
gradle-home-cache-cleanup: true
arguments: assemble --scan
- uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3