Skip to content

CodeQL

CodeQL #3191

name: "CodeQL"
on: [ pull_request, workflow_dispatch ]
jobs:
lint:
name: CodeQL
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 2
path: database
- name: Checkout query library
uses: actions/checkout@v4
with:
repository: utopia-php/query
ref: feat-builder
path: query
- run: git checkout HEAD^2
if: github.event_name == 'pull_request'
working-directory: database
- name: Run CodeQL
run: |
docker run --rm -v $PWD/database:/app -v $PWD/query:/query -w /app -e COMPOSER_MIRROR_PATH_REPOS=1 php:8.4-cli-alpine sh -c \
"php -r \"copy('https://getcomposer.org/installer', '/tmp/composer-setup.php');\" && \
php /tmp/composer-setup.php --install-dir=/usr/local/bin --filename=composer && \
sed -i 's|\"url\": \"../query\"|\"url\": \"/query\"|' composer.json && \
sed -i 's|\"symlink\": true|\"symlink\": false|' composer.json && \
sed -i 's|\"url\": \"../query\"|\"url\": \"/query\"|' composer.lock && \
composer install --profile --ignore-platform-reqs && \
composer check"