57627c2e80
Extract java-kotlin language analysis from the shared CodeQL Advanced workflow into a dedicated codeql-kotlin.yml workflow. This allows the Kotlin analysis (which requires Java, Gradle, and a manual build) to run independently with path filtering on packages/kilo-jetbrains, reducing unnecessary CI runs for unrelated changes. - Add new codeql-kotlin.yml with path-scoped triggers - Remove java-kotlin from the matrix in codeql.yml - Simplify codeql.yml by removing conditional Java/Gradle setup steps - Register codeql-kotlin.yml in check-workflows.ts active set
63 lines
1.5 KiB
YAML
63 lines
1.5 KiB
YAML
# kilocode_change - new file
|
|
name: "CodeQL Kotlin"
|
|
|
|
on:
|
|
push:
|
|
branches: ["main"]
|
|
paths:
|
|
- "packages/kilo-jetbrains/**"
|
|
- ".github/workflows/codeql-kotlin.yml"
|
|
pull_request:
|
|
branches: ["main"]
|
|
paths:
|
|
- "packages/kilo-jetbrains/**"
|
|
- ".github/workflows/codeql-kotlin.yml"
|
|
schedule:
|
|
- cron: "29 10 * * 5"
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze (java-kotlin)
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
security-events: write
|
|
packages: read
|
|
actions: read
|
|
contents: read
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Setup Bun
|
|
uses: ./.github/actions/setup-bun
|
|
|
|
- name: Setup Java
|
|
uses: actions/setup-java@v4
|
|
with:
|
|
distribution: temurin
|
|
java-version: "21"
|
|
|
|
- name: Setup Gradle
|
|
uses: gradle/actions/setup-gradle@v4
|
|
with:
|
|
cache-read-only: ${{ github.ref != 'refs/heads/main' }}
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v4
|
|
with:
|
|
languages: java-kotlin
|
|
build-mode: manual
|
|
config-file: ./.github/codeql/codeql-config.yml
|
|
|
|
- name: Build Java/Kotlin
|
|
shell: bash
|
|
run: ./gradlew typecheck --rerun-tasks --no-build-cache
|
|
working-directory: packages/kilo-jetbrains
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@v4
|
|
with:
|
|
category: "/language:java-kotlin"
|