codeql.yml

# Do not modify!
# This file was generated from a template using https://github.com/apple/pkl

name: CodeQL
'on':
  pull_request:
    paths:
    - '**.cs'
    - '**.cpp'
    - '**.hpp'
    - '**.csproj'
    - .github/workflows/codeql.yml
    branches:
    - main
  push:
    branches:
    - main
env:
  REALM_DISABLE_ANALYTICS: true
concurrency:
  group: codeql-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true
jobs:
  analyze-csharp:
    name: Analyze C#
    permissions:
      actions: read
      contents: read
      security-events: write
    runs-on: windows-latest
    steps:
    - name: Checkout Code
      uses: actions/checkout@v4
      with:
        submodules: false
        ref: ${{ github.event.pull_request.head.sha }}
    - name: Initialize CodeQL
      uses: github/codeql-action/init@a57c67b89589d2d13d5ac85a9fc4679c7539f94c
      with:
        languages: csharp
        config: |-
          queries:
            - uses: security-and-quality
          query-filters:
            - exclude:
                id: cs/call-to-unmanaged-code
            - exclude:
                id: cs/unmanaged-code
    - name: Setup JDK
      uses: actions/setup-java@2e74cbce18569d23ca8b812590dbb83f13ac7c5a
      with:
        distribution: microsoft
        java-version: 17
    - name: Setup Android
      uses: android-actions/setup-android@e1f5280adf78cf863c0fa43ffabc64a9cd08153f
    - name: Install SDK platform 21
      run: sdkmanager --install "platforms;android-21"
    - uses: actions/setup-dotnet@5d1464d5da459f3d7085106d52e499f4dc5d0f59
      with:
        dotnet-version: 8.0.x
    - name: Setup workloads
      run: dotnet workload install tvos ios maccatalyst android
    - name: Add msbuild to PATH
      if: ${{ runner.os == 'Windows' }}
      uses: microsoft/setup-msbuild@70b70342ae97ca98d5eaad06cafd26d30f9592a9
    - name: Build Realm/Realm
      run: msbuild Realm/Realm -restore -p:Configuration=Release -p:UseSharedCompilation=false
    - name: Build Realm/Realm.PlatformHelpers
      run: msbuild Realm/Realm.PlatformHelpers -restore -p:Configuration=Release -p:UseSharedCompilation=false
    - name: Build Realm/Realm.UnityUtils
      run: msbuild Realm/Realm.UnityUtils -restore -p:Configuration=Release -p:UseSharedCompilation=false
    - name: Build Realm/Realm.UnityWeaver
      run: msbuild Realm/Realm.UnityWeaver -restore -p:Configuration=Release -p:UseSharedCompilation=false
    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@a57c67b89589d2d13d5ac85a9fc4679c7539f94c