codeql-action/.github/workflows/__local-bundle.yml

# Warning: This file is generated automatically, and should not be modified.
# Instead, please modify the template in the pr-checks directory and run:
#     pr-checks/sync.sh
# to regenerate this file.

name: PR Check - Local CodeQL bundle
env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  GO111MODULE: auto
on:
  push:
    branches:
      - main
      - releases/v*
  pull_request:
    types:
      - opened
      - synchronize
      - reopened
      - ready_for_review
  merge_group:
    types:
      - checks_requested
  schedule:
    - cron: '0 5 * * *'
  workflow_dispatch:
    inputs:
      dotnet-version:
        type: string
        description: The version of .NET to install
        required: false
        default: 9.x
      go-version:
        type: string
        description: The version of Go to install
        required: false
        default: '>=1.21.0'
      python-version:
        type: string
        description: The version of Python to install
        required: false
        default: '3.13'
  workflow_call:
    inputs:
      dotnet-version:
        type: string
        description: The version of .NET to install
        required: false
        default: 9.x
      go-version:
        type: string
        description: The version of Go to install
        required: false
        default: '>=1.21.0'
      python-version:
        type: string
        description: The version of Python to install
        required: false
        default: '3.13'
defaults:
  run:
    shell: bash
concurrency:
  cancel-in-progress: ${{ github.event_name == 'pull_request' || false }}
  group: local-bundle-${{github.ref}}-${{inputs.dotnet-version}}-${{inputs.go-version}}-${{inputs.python-version}}
jobs:
  should-run-local-bundle:
    name: Decide whether to run this check
    timeout-minutes: 10
    runs-on: ubuntu-slim
    if: github.triggering_actor != 'dependabot[bot]'
    outputs:
      run-check: ${{ steps.changed-files-check.outputs.run-check || steps.event-type-check.outputs.run-check }}
    steps:
      - name: Run check if this is not a PR
        id: event-type-check
        if: github.event_name != 'pull_request'
        run: echo "run-check=true" >> "$GITHUB_OUTPUT"
      - name: Check out repository
        if: github.event_name == 'pull_request'
        uses: actions/checkout@v6
      - name: Determine changed files
        id: changed-files
        if: github.event_name == 'pull_request'
        uses: ./.github/actions/changed-files
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          exclude: '["README.md"]'
      - name: Run check because of changed files
        id: changed-files-check
        if: github.event_name != 'pull_request' && steps.changed-files.outputs.files != '[]'
        run: echo "run-check=true" >> "$GITHUB_OUTPUT"
  local-bundle:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            version: linked
    name: Local CodeQL bundle
    needs:
      - should-run-local-bundle
    if: needs.should-run-local-bundle.outputs.run-check == 'true'
    permissions:
      contents: read
      security-events: read
    timeout-minutes: 45
    runs-on: ${{ matrix.os }}
    steps:
      - name: Check out repository
        uses: actions/checkout@v6
      - name: Install .NET
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
      - name: Install Go
        uses: actions/setup-go@v6
        with:
          go-version: ${{ inputs.go-version || '>=1.21.0' }}
          cache: false
      - name: Install Python
        if: matrix.version != 'nightly-latest' || !matrix.version
        uses: actions/setup-python@v6
        with:
          python-version: ${{ inputs.python-version || '3.13' }}
      - name: Prepare test
        id: prepare-test
        uses: ./.github/actions/prepare-test
        with:
          version: ${{ matrix.version }}
          use-all-platform-bundle: 'false'
          setup-kotlin: 'true'
      - name: Fetch latest CodeQL bundle
        run: |
          wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.zst
      - id: init
        uses: ./../action/init
        with:
          # Swift is not supported on Ubuntu so we manually exclude it from the list here
          languages: cpp,csharp,go,java,javascript,python,ruby
          tools: ./codeql-bundle-linux64.tar.zst
      - name: Build code
        run: ./build.sh
      - uses: ./../action/analyze
    env:
      CODEQL_ACTION_TEST_MODE: true
  skip-local-bundle:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            version: linked
    name: Local CodeQL bundle
    needs:
      - should-run-local-bundle
    if: needs.should-run-local-bundle.outputs.run-check != 'true'
    timeout-minutes: 5
    runs-on: ubuntu-slim
    steps:
      - name: Success
        run: exit 0