fix(intent): rollup glue resolves setting-entity child/parent to the Settings perspective #3382
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Advanced [Push & PR]" | |
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request: | |
| branches: | |
| - master | |
| schedule: | |
| - cron: '32 20 * * 0' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| sast-codeql-analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write # Required to upload SARIF to GitHub Security tab | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - language: java-kotlin | |
| build-mode: manual | |
| - language: javascript-typescript | |
| build-mode: none | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Set up JDK Corretto 24 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: 'corretto' | |
| java-version: '24' | |
| architecture: x64 | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22.x | |
| - name: Install TypeScript and esbuild | |
| run: npm install -g typescript@5.9.3 esbuild | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| config: | | |
| name: "Comprehensive Multi-language CodeQL Config" | |
| # Exclude generated/bundled artifacts: java-lsp-client.js is the esbuild output of | |
| # java-lsp-client.ts (the .ts source IS analysed) and embeds vendored | |
| # vscode-languageserver protocol/types; scanning the bundle only yields noise from that | |
| # third-party generated code. | |
| paths-ignore: | |
| - 'components/ui/editor-monaco/src/main/resources/META-INF/dirigible/editor-monaco/js/java-lsp-client.js' | |
| query-filters: | |
| - exclude: | |
| id: java/path-injection | |
| queries: | |
| - uses: security-and-quality | |
| - name: Build Java/Kotlin project | |
| if: matrix.language == 'java-kotlin' | |
| # CodeQL analyses the Java source; it does not need the JDT.LS / java-debug runtime binaries. | |
| # Skip those build-time downloads so the analysis does not depend on download.eclipse.org | |
| # (an external host that intermittently fails to respond and broke this job). | |
| run: mvn clean install -P quick-build -Djdtls.download.skip=true -Djava.debug.plugin.download.skip=true | |
| - name: Perform CodeQL Analysis for language ${{ matrix.language }} | |
| uses: github/codeql-action/analyze@v3 | |
| with: | |
| category: "/language:${{ matrix.language }}" | |
| output: "sast_codeql_report_${{ matrix.language }}" | |
| upload: always | |
| - name: Upload CodeQL Analysis SARIF file as artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: sast_codeql_sarif_${{ matrix.language }} | |
| path: sast_codeql_report_${{ matrix.language }} |