codeql.yml

name: CodeQL
"on":
  push:
    branches:
    - main
  pull_request:
    branches:
    - main
    paths:
    - '**.cs'
    - '**.cpp'
    - '**.hpp'
    - '**.csproj'
    - .github/workflows/codeql.yml
env:
  REALM_DISABLE_ANALYTICS: true
concurrency:
  group: codeql-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true
jobs:
  analyze-csharp:
    name: Analyze C#
    runs-on: windows-latest
    permissions:
      actions: read
      contents: read
      security-events: write
    steps:
    - name: Checkout code
      uses: actions/checkout@v3
      with:
        submodules: false
        ref: ${{ github.event.pull_request.head.sha }}
    - name: Initialize CodeQL
      uses: github/codeql-action/init@40542d38bc4936c2ca7da883aeb050a6081b4b31
      with:
        languages: csharp
        config: |
          queries:
            - uses: security-and-quality
          query-filters:
            - exclude: cs/call-to-unmanaged-code
            - exclude: cs/unmanaged-code
    - name: Setup Android
      uses: android-actions/setup-android@7c5672355aaa8fde5f97a91aa9a99616d1ace6bc
    - name: Install SDK platform 21
      run: sdkmanager --install "platforms;android-21"
    - name: Setup workloads
      run: dotnet workload install tvos ios maccatalyst android
    - name: Add msbuild to PATH
      uses: microsoft/setup-msbuild@0b44c6745b7e81956596964100aadb92d667c497
    - name: Build Realm.PlatformHelpers
      run: msbuild Realm/Realm.PlatformHelpers -p:UseSharedCompilation=false -restore -p:Configuration=Release
    - name: Build Realm
      run: msbuild Realm/Realm -p:UseSharedCompilation=false -restore -p:Configuration=Release
    - name: Build Realm.UnityUtils
      run: msbuild Realm/Realm.UnityUtils -p:UseSharedCompilation=false -restore -p:Configuration=Release
    - name: Build Realm.UnityWeaver
      run: msbuild Realm/Realm.UnityWeaver -p:UseSharedCompilation=false -restore -p:Configuration=Release
    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@40542d38bc4936c2ca7da883aeb050a6081b4b31