From 24d681d4424d360cce99c4f8a9d8a689a7ec8f4a Mon Sep 17 00:00:00 2001 From: Derek Roberts Date: Wed, 30 Oct 2024 14:59:57 -0700 Subject: [PATCH] chore(ci): use GH default CodeQL (#86) * chore(ci): replace custom w/ default GH CodeQL * Remove extra job --- .github/workflows/reusable-tests-repo.yml | 64 ----------------------- .gitignore | 9 +--- 2 files changed, 2 insertions(+), 71 deletions(-) diff --git a/.github/workflows/reusable-tests-repo.yml b/.github/workflows/reusable-tests-repo.yml index b2a6dea..2dd279e 100644 --- a/.github/workflows/reusable-tests-repo.yml +++ b/.github/workflows/reusable-tests-repo.yml @@ -4,35 +4,6 @@ on: workflow_call: jobs: - vars: - name: Variables - runs-on: ubuntu-latest - outputs: - semver: ${{ steps.semver.outputs.version }} - tag: ${{ steps.semver.outputs.tag }} - pr: ${{ steps.pr.outputs.pr }} - steps: - # steps.semver.outputs.tag => needs.vars.outputs.semver - - name: PR Number - id: pr - uses: bcgov-nr/action-get-pr@v0.0.1 - - uses: actions/checkout@v4 - with: - ref: refs/heads/${{ github.event.repository.default_branch }} - - name: Conventional Changelog Update - uses: TriPSs/conventional-changelog-action@v5.3.0 - id: semver - with: - git-branch: refs/heads/${{ github.head_ref }} - git-push: 'false' - skip-commit: 'true' - skip-on-empty: 'false' - skip-version-file: 'true' - - - run: | - echo "semver=${{ steps.semver.outputs.version }}" - echo "tag=${{ steps.semver.outputs.tag }}" - trivy: name: Repository Report if: github.event_name != 'pull_request' || !github.event.pull_request.draft @@ -53,38 +24,3 @@ jobs: uses: github/codeql-action/upload-sarif@v3 with: sarif_file: "trivy-results.sarif" - - codeql: - name: Semantic Code Analysis - runs-on: ubuntu-24.04 - needs: [vars] - permissions: - actions: read - contents: read - security-events: write - steps: - - uses: actions/checkout@v4 - - uses: github/codeql-action/init@v3 - with: - languages: javascript,java - - # Autobuild failed for Java, so building manually - - name: Set up JDK 17 and Caching maven dependencies - uses: actions/setup-java@v4 - with: - distribution: "temurin" - java-version: "17" - cache: "maven" - server-id: "github" - - # Java builds - - name: Build Core - working-directory: core - run: mvn clean package install -DskipTests -Dtests.skip=true - - - name: Build Spring - working-directory: spring - run: mvn clean package -DskipTests -Dtests.skip=true - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 diff --git a/.gitignore b/.gitignore index 9161739..91c1aa0 100644 --- a/.gitignore +++ b/.gitignore @@ -201,12 +201,7 @@ buildNumber.properties .classpath ### VisualStudioCode ### -.vscode/* -!.vscode/settings.json -!.vscode/tasks.json -!.vscode/launch.json -!.vscode/extensions.json -!.vscode/*.code-snippets +.vscode/ # Local History for Visual Studio Code .history/ @@ -229,4 +224,4 @@ config/application-dev-*.yml **/*.iml .DS_Store -**/.DS_Store \ No newline at end of file +**/.DS_Store