move codeql to build.yml

we no longer need separate actions now that coverage will be consolidated into SonarCloud

Author: adamkorynta

.github/workflows/build.yml

@@ -1,60 +1,48 @@
-name: Build cwms-data-api-client
+name: "Build and Static Code Analysis"
 on:
+  push:
+    branches: [ main ]
   pull_request:
-    branches:
-      - main
+    branches: [ main ]
+  schedule:
+    - cron: '0 0 * * 0'
+
 
 jobs:
-  build:
-    name: build and test
+  analyze:
+    name: Analyze
     runs-on: ubuntu-latest
     steps:
-      - name: checkout code
+      - name: Checkout repository
         uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: 'java'
       - name: setup java
         uses: actions/setup-java@v4
         with:
           java-version: '21'
           java-package: jdk
           distribution: 'temurin'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v3.4.2
+        with:
+          dependency-graph: generate-and-submit
       - name: Cache SonarCloud packages
         uses: actions/cache@v4.0.0
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
       - name: build and test
-        id: thebuild
+        id: build
         run: ./gradlew build --info --init-script init.gradle
-      - name: Setup .NET Core # Required to execute ReportGenerator
-        uses: actions/setup-dotnet@v4
-        with:
-          dotnet-version: 6.x
-          dotnet-quality: 'ga'
-      - name: Analyze
+      - name: CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+      - name: SonarCloud Analysis
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
         run: ./gradlew sonar
-      - name: ReportGenerator
-        uses: danielpalme/ReportGenerator-GitHub-Action@5.3.6
-        with:
-          reports: cwms-aaa-client/build/reports/jacoco/test/jacocoTestReport.xml;cwms-http-client/build/reports/jacoco/test/jacocoTestReport.xml;cwms-radar-client/build/reports/jacoco/test/jacocoTestReport.xml
-          targetdir: .github/coveragereport
-          reporttypes: Html;MarkdownSummaryGithub;Badges
-      - name: Upload coverage report artifact
-        uses: actions/upload-artifact@v4.3.3
-        with:
-          name: CoverageReport # Artifact name
-          path: .github/coveragereport # Directory containing files to upload
-      - name: Commit and push Badges
-        if: github.event_name != 'pull_request' && github.ref != 'refs/heads/main'
-        run: |
-          cd .github/coveragereport
-          if [[ `git status --porcelain badge_*coverage.svg` ]]; then
-            git config --global user.name 'builduser'
-            git config --global user.email 'builduser@rmanet.com'
-            git add badge_*coverage.svg
-            git commit -m "Autogenerated JaCoCo coverage badge" badge_*coverage.svg
-            git push
-          fi