Integrate Github CodeQL Analysis into CI (#905)

vrozov · web-flow · commit 3f6efe92e626 · 2020-12-22T15:33:51.000-08:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -11,6 +11,7 @@ on:
 
 jobs:
   build:
+    name: build
     runs-on: ubuntu-latest
 
     steps:
@@ -23,6 +24,11 @@ jobs:
     - name: Checkout security
       uses: actions/checkout@v2
 
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: java
+
     - name: Cache Maven packages
       uses: actions/cache@v1
       with:
@@ -33,6 +39,12 @@ jobs:
     - name: Checkstyle
       run: mvn -B checkstyle:checkstyle
 
+    - name: Package
+      run: mvn -B clean package -Padvanced -DskipTests
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1
+
     - name: Test
       run: OPENDISTRO_SECURITY_TEST_OPENSSL_OPT=true mvn -B test
 
@@ -41,9 +53,6 @@ jobs:
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
 
-    - name: Package
-      run: mvn -B clean package -Padvanced -DskipTests
-
     - name: Upload Artifacts
       uses: actions/upload-artifact@v1
       with:
