Feature/update readmes #16
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL — Static Security Analysis | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| schedule: | |
| # Full analysis on Mondays at 2:00 AM UTC | |
| # Análisis completo los lunes a las 2:00 AM UTC | |
| - cron: '0 2 * * 1' | |
| jobs: | |
| codeql-analysis: | |
| name: CodeQL Analysis (Java) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write # Required to upload results to GitHub Security - Necesario para subir resultados a GitHub Security | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Configure Java 17 (Temurin) | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: java | |
| # Extended security queries (recommended for financial projects) | |
| # Queries de seguridad extendidas (recomendado para proyectos financieros) | |
| queries: security-extended | |
| - name: Build for CodeQL | |
| run: ./mvnw clean compile -DskipTests --no-transfer-progress | |
| - name: Run CodeQL analysis | |
| uses: github/codeql-action/analyze@v3 | |
| continue-on-error: true | |
| with: | |
| category: "/language:java" | |
| upload: true |