KielerGames/ringofsnakes

Integrate CodeQL workflow into client and server workflows

Closed this issue · 1 comments

tim-we commented

Integrate CodeQL workflow into client and server workflows to avoid duplicate work. For example, right now it scans JS code on PRs that only change Java Code. And it is a separate workflow that has to set up Java and build the project.

tim-we commented

This is almost done but requires some more cleanup. In particular the client workflow should clean some stuff up before doing the CodeQL analysis as it reports findings in client/public/bundle-report.html

The Java workflow also has issues: https://github.com/KielerGames/ringofsnakes/actions/runs/7658918089
Perhaps this one could be solved by running the CodeQL initialization before running maven commands.