Modify OWASP Dependency Check configuration #8
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL — Static Security Analysis | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| schedule: | |
| # Full analysis on Mondays at 2:00 AM UTC | |
| # Análisis completo los lunes a las 2:00 AM UTC | |
| - cron: '0 2 * * 1' | |
| jobs: | |
| codeql-analysis: | |
| name: CodeQL Analysis (Java) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write # Required to upload results to GitHub Security - Necesario para subir resultados a GitHub Security | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Configure Java 17 (Temurin) | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: java | |
| # Extended security queries (recommended for financial projects) | |
| # Queries de seguridad extendidas (recomendado para proyectos financieros) | |
| queries: security-extended | |
| - name: Build for CodeQL | |
| run: ./mvnw clean compile -DskipTests --no-transfer-progress | |
| - name: Run CodeQL analysis | |
| uses: github/codeql-action/analyze@v3 | |
| with: | |
| category: "/language:java" | |
| # If Code Scanning is not enabled, the build does not fail | |
| # Si no está habilitado Code Scanning, no falla el build | |
| upload: ${{ github.event_name != 'pull_request' }} | |
| continue-on-error: true | |
| # Does not block the CI if Code Scanning is not enabled | |
| # No bloquea el CI si Code Scanning no está habilitado |