Skip to content

Commit

Permalink
Reduce Maven console output for CodeQL analysis; cache Maven repo (#2105
Browse files Browse the repository at this point in the history
)
  • Loading branch information
Marcono1234 committed Apr 18, 2022
1 parent 4dda4ec commit feaf8dd
Showing 1 changed file with 9 additions and 1 deletion.
10 changes: 9 additions & 1 deletion .github/workflows/codeql-analysis.yml
Expand Up @@ -35,12 +35,20 @@ jobs:
# Run all security queries and maintainability and reliability queries
queries: +security-and-quality

- name: Cache local Maven repository
uses: actions/cache@v3
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
restore-keys: |
${{ runner.os }}-maven-
# Only compile main sources, but ignore test sources because findings for them might not
# be that relevant (though GitHub security view also allows filtering by source type)
# Can replace this with github/codeql-action/autobuild action to run complete build
- name: Compile sources
run: |
mvn compile
mvn compile --batch-mode
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v1

0 comments on commit feaf8dd

Please sign in to comment.