codeql-analysis.yml

# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
#
# ******** NOTE ********
# We have attempted to detect the languages in your repository. Please check
# the `language` matrix defined below to confirm you have the correct set of
# supported CodeQL languages.
#
name: codeql-analysis

on:
  push:
    branches: [main]

  pull_request:
    # The branches below must be a subset of the branches above
    branches: [main]

concurrency:
  group: codeql-analysis-${{ github.ref }}
  cancel-in-progress: true

jobs:
  debug:
    name: Debug
    runs-on: ubuntu-latest

    steps:
      - name: Debug Action
        uses: hmarr/debug-action@v3

  check_changes:
    uses: patmoreau/workflow-config/.github/workflows/check-changes-action.yml@main
    with:
      file_patterns: ${{ vars.CODEQL_CODE_FILE_PATTERNS }}

  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    needs: check_changes
    if: needs.check_changes.outputs.code_was_changed == 'true'

    strategy:
      fail-fast: false
      matrix:
        language: ['csharp', 'javascript']
        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
        # Learn more:
        # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20.x'

      - name: Install pnpm
        run: npm install -g pnpm

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: ${{ matrix.language }}
          # If you wish to specify custom queries, you can do so here or in a config file.
          # By default, queries listed here will override any specified in a config file.
          # Prefix the list here with "+" to use these queries and those in the config file.
          # queries: ./path/to/local/query, your-org/your-repo/queries@main

      - name: Setup .NET
        uses: actions/setup-dotnet@v4
        with:
          global-json-file: ./global.json

      - name: Restore Api dependencies
        run: dotnet restore src/Holefeeder.Api/Holefeeder.Api.csproj

      - name: Build Api
        run: dotnet build src/Holefeeder.Api/Holefeeder.Api.csproj --no-restore

      # - name: Install .NET MAUI Workloads
      #   run: dotnet workload install maui-android

      # - name: Restore Ui.Maui dependencies
      #   run: dotnet restore src/Holefeeder.Ui.Maui/Holefeeder.Ui.Maui.csproj -p:RuntimeIdentifier=android

      # - name: Build Ui.Maui
      #   run: dotnet build src/Holefeeder.Ui.Maui/Holefeeder.Ui.Maui.csproj --no-restore -p:RuntimeIdentifier=android

      - name: Restore Ui.Web dependencies
        run: dotnet restore src/Holefeeder.Ui.Web/Holefeeder.Ui.Web.csproj

      - name: Build Ui.Web
        run: dotnet build src/Holefeeder.Ui.Web/Holefeeder.Ui.Web.csproj --no-restore

      - name: Restore Web dependencies
        run: dotnet restore src/Holefeeder.Web/Holefeeder.Web.csproj

      - name: Build Web
        run: dotnet build src/Holefeeder.Web/Holefeeder.Web.csproj --no-restore

      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
      # If this step fails, then you should remove it and run the build manually (see below)
      # - name: Autobuild
      #   uses: github/codeql-action/autobuild@v2

      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 https://git.io/JvXDl

      # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
      #    and modify them (or add more) to build your code if your project
      #    uses a compiled language

      #- run: |
      #   make bootstrap
      #   make release

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3

  create_check:
    needs: [check_changes, analyze]
    uses: patmoreau/workflow-config/.github/workflows/create-check.yml@main
    if: always() && needs.check_changes.result == 'success'
    with:
      code_was_changed: ${{ needs.check_changes.outputs.code_was_changed }}
      check_name: 'codeql-completed'
      check_result: ${{ needs.analyze.result }}