This is an automated email from the ASF dual-hosted git repository.

chriss pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git


The following commit(s) were added to refs/heads/main by this push:
     new 39898d1ee2 NIFI-12278 Added CodeQL to Static Analysis Job
39898d1ee2 is described below

commit 39898d1ee28e7f0475560f2f4a052d904ef0104d
Author: exceptionfactory <exceptionfact...@apache.org>
AuthorDate: Wed Oct 25 14:21:47 2023 -0500

    NIFI-12278 Added CodeQL to Static Analysis Job
    
    This closes #7934
    
    Signed-off-by: Chris Sampson <chris.sampso...@gmail.com>
---
 .github/workflows/ci-workflow.yml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci-workflow.yml 
b/.github/workflows/ci-workflow.yml
index 03a9718d7d..330d0eef14 100644
--- a/.github/workflows/ci-workflow.yml
+++ b/.github/workflows/ci-workflow.yml
@@ -79,11 +79,12 @@ concurrency:
   cancel-in-progress: true
 
 permissions:
+  security-events: write
   contents: read
 
 jobs:
   static-analysis:
-    timeout-minutes: 30
+    timeout-minutes: 120
     name: Static Analysis
     runs-on: ubuntu-latest
     steps:
@@ -109,6 +110,19 @@ jobs:
           --no-transfer-progress
           --fail-fast
           -P contrib-check
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: java
+      - name: Maven Compile
+        env:
+          MAVEN_OPTS: >-
+            ${{ env.COMPILE_MAVEN_OPTS }}
+        run: >
+          ${{ env.MAVEN_COMMAND }}
+          ${{ env.MAVEN_COMPILE_COMMAND }}
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
 
   ubuntu-build-en:
     timeout-minutes: 120

Reply via email to