build(deps): update github/codeql-action digest to df409f7 #2551
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Workflow for testing spoon code quality. | |
| # | |
| # Note that actions are specified by commit hash. This is to avoid the security | |
| # risk of someone injecting malicious code into a release and then simply | |
| # changing a tag. | |
| name: Qodana | |
| on: | |
| pull_request: | |
| branches: | |
| - master | |
| jobs: | |
| code-quality: | |
| runs-on: ubuntu-latest | |
| name: code-quality qodana | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: 'Qodana Scan' | |
| uses: JetBrains/qodana-action@b46847499776819f38aad1d4298e16e52f17c4c5 # v2024.3.2 | |
| with: | |
| args: --source-directory,./src/main/java , --fail-threshold, 0 | |
| post-pr-comment: "false" | |
| - uses: github/codeql-action/upload-sarif@8a93837afdf1873301a68d777844b43e98cd4313 # v3 | |
| with: | |
| sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json | |
| code-quality-spoon-javadoc: | |
| runs-on: ubuntu-latest | |
| name: code-quality spoon-javadoc qodana | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: 'Qodana Scan (spoon-javadoc)' | |
| uses: JetBrains/qodana-action@b46847499776819f38aad1d4298e16e52f17c4c5 # v2024.3.2 | |
| with: | |
| args: --source-directory,./spoon-javadoc/src/main/java , --fail-threshold, 0 | |
| post-pr-comment: "false" | |
| - uses: github/codeql-action/upload-sarif@8a93837afdf1873301a68d777844b43e98cd4313 # v3 | |
| with: | |
| sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json | |
| code-quality-spoon-control-flow: | |
| runs-on: ubuntu-latest | |
| name: code-quality spoon-controlflow qodana | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: 'Qodana Scan (spoon-control-flow)' | |
| uses: JetBrains/qodana-action@b46847499776819f38aad1d4298e16e52f17c4c5 # v2024.3.2 | |
| with: | |
| args: --source-directory,./spoon-control-flow/src/main/java , --fail-threshold, 0 | |
| post-pr-comment: "false" | |
| - uses: github/codeql-action/upload-sarif@8a93837afdf1873301a68d777844b43e98cd4313 # v3 | |
| with: | |
| sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json |