codeql-analysis-template.yml

#SPDX-FileCopyrightText: 2017-2024 Enedis
#SPDX-License-Identifier: Apache-2.0

name: "CodeQL template"

on:
  workflow_call:
    inputs:
      project-dir:
        type: string
        default: ""
        required: false
        description: "sourcecode root directory"
      language:
        type: string
        required: true
        description: "Release if true"
      build-mode:
        type: string
        required: false
        default: autobuild
        description: "The build mode that will be used to analyze the language"

jobs:
  codeql-analyze:
    runs-on: ubuntu-latest
    permissions:
      # required for all workflows
      security-events: write
      # required to fetch internal or private CodeQL packs
      packages: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up JDK
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: 17
          cache: "maven"

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: ${{ inputs.language }}
          build-mode: ${{ inputs.build-mode }}
          source-root: ${{ inputs.project-dir }}

      - if: inputs.build-mode == 'autobuild'
        name: Auto build
        uses: github/codeql-action/autobuild@v3
        with:
          working-directory: ${{ inputs.project-dir }}

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3
        with:
          category: "/language:${{inputs.language}}"