Merge pull request #1730 from schemacrawler/codeql

Add CodeQL workflow

.github/workflows/codeql-analysis.yml

@@ -22,17 +22,36 @@ jobs:
       security-events: write
 
     steps:
-    - id: checkout-repo
-      name: Checkout repository
-      uses: actions/checkout@v4
+# SETUP BUILD ENVIRONMENT
+    - id: prepare-maven-build
+      name: Prepare Maven build
+      uses: sualeh/[email protected]
+      with:
+        java-version: 8
+    - id: install-graphviz
+      name: Install Graphviz
+      uses: sualeh/[email protected]
 
+# INIT CODEQL
     - id: init-codeql
       name: Initialize CodeQL
       uses: github/codeql-action/init@v3
       with:
         languages: java
-        # config-file: .github/codeql/codeql-config.yml
 
+# BUILD AND TEST
+    - id: build-test
+      name: Build all modules and run tests
+      shell: bash
+      run: |
+        # Build
+        mvn \
+          --no-transfer-progress \
+          --batch-mode \
+          -DskipTests \
+          clean package
+          
+# ANALYZE          
     - id: perform-codeql-analysis
       name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3
@@ -43,6 +62,6 @@ jobs:
       name: Upload CodeQL results
       uses: actions/upload-artifact@v4
       with:
-        name: codeql-results
-        path: ./codeql-results
+        name: java_sarif
+        path: .results/java.sarif
         retention-days: 5