Integrate CodeQl into main build (#245)

ThreeTen · Dec 17, 2022 · dee0fed · dee0fed
1 parent 71bfb4a
commit dee0fed
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 69 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -10,20 +10,27 @@ on:
   pull_request:
     branches:
       - 'main'
+  schedule:
+    - cron: '41 19 * * 2'
+
+permissions:
+  contents: read
 
 jobs:
   build:
+    permissions:
+      security-events: write  # for github/codeql-action
     runs-on: ubuntu-latest
     strategy:
       matrix:
         java: [8, 11]
 
     steps:
     - name: Checkout
-      uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b  #v3.0.2
+      uses: actions/checkout@v3
 
     - name: Set up JDK
-      uses: actions/setup-java@2c7a4878f5d120bd643426d54ae1209b29cc01a3  #v3.4.1
+      uses: actions/setup-java@v3
       with:
         java-version: ${{ matrix.java }}
         distribution: 'temurin'
@@ -36,10 +43,20 @@ jobs:
         mvn --version
         mkdir -p target
 
+    - name: Initialize CodeQL
+      if: matrix.java == '11'
+      uses: github/codeql-action/init@v2
+      with:
+        languages: java
+
     - name: Maven build
       run: |
         mvn install site
 
+    - name: Perform CodeQL Analysis
+      if: matrix.java == '11'
+      uses: github/codeql-action/analyze@v2
+
     - name: Website
       if: matrix.java == '11' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/website') || startsWith(github.ref, 'refs/tags/v'))
       env:

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
@@ -8,6 +8,13 @@
   <body>
     <!-- types are add, fix, remove, update -->
     <release version="1.7.2" date="SNAPSHOT" description="v1.7.2">
+      <action dev="Clockwork-Muse" type="add">
+        Adds offset for AccountingChronology, which is essential for some retail calendars, particularly the NRF.
+        Fixes #223, #201.
+      </action>
+      <action dev="jodastephen" type="update">
+        Update CodeQL.
+      </action>
       <action dev="jodastephen" type="update">
         Switch master to main.
       </action>