Reduce Maven console output for CodeQL analysis; cache Maven repo (#2105)
This commit is contained in:
parent
4dda4ec5ba
commit
feaf8ddc05
10
.github/workflows/codeql-analysis.yml
vendored
10
.github/workflows/codeql-analysis.yml
vendored
@ -35,12 +35,20 @@ jobs:
|
||||
# Run all security queries and maintainability and reliability queries
|
||||
queries: +security-and-quality
|
||||
|
||||
- name: Cache local Maven repository
|
||||
uses: actions/cache@v3
|
||||
with:
|
||||
path: ~/.m2/repository
|
||||
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
|
||||
restore-keys: |
|
||||
${{ runner.os }}-maven-
|
||||
|
||||
# Only compile main sources, but ignore test sources because findings for them might not
|
||||
# be that relevant (though GitHub security view also allows filtering by source type)
|
||||
# Can replace this with github/codeql-action/autobuild action to run complete build
|
||||
- name: Compile sources
|
||||
run: |
|
||||
mvn compile
|
||||
mvn compile --batch-mode
|
||||
|
||||
- name: Perform CodeQL Analysis
|
||||
uses: github/codeql-action/analyze@v1
|
||||
|
Loading…
Reference in New Issue
Block a user