Combine code-ql and ci workflows

jonlabelle · May 4, 2024 · b5e8faf · b5e8faf
1 parent bb983e9
commit b5e8faf
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 54 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -44,3 +44,39 @@ jobs:
           dotnet restore
           dotnet build --configuration Release --no-restore
           dotnet test --configuration Release --verbosity minimal --no-build
+
+  analyze:
+    name: Code analysis
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['csharp']
+
+    steps:
+      - name: Checkout Git repository
+        uses: actions/checkout@v4
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          global-json-file: global.json
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Restore dependencies
+        run: dotnet restore --verbosity normal
+
+      - name: Build
+        run: dotnet build --no-restore /p:UseSharedCompilation=false
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
diff --git a/.github/workflows/code-analysis.yml b/.github/workflows/code-analysis.yml
diff --git a/README.md b/README.md
@@ -1,9 +1,8 @@
 # Anti-LDAP Injection
 
-[![NuGet package](https://buildstats.info/nuget/AntiLdapInjection)](https://www.nuget.org/packages/AntiLdapInjection "NuGet package")
-[![CI build status](https://github.com/jonlabelle/AntiLdapInjection/workflows/ci/badge.svg)](https://github.com/jonlabelle/AntiLdapInjection/actions?query=workflow%3Aci "CI build status")
-[![CD release status](https://github.com/jonlabelle/AntiLdapInjection/workflows/cd/badge.svg)](https://github.com/jonlabelle/AntiLdapInjection/actions?query=workflow%3Acd "CD release status")
-[![CodeQL Analysis](https://github.com/jonlabelle/AntiLdapInjection/actions/workflows/code-analysis.yml/badge.svg)](https://github.com/jonlabelle/AntiLdapInjection/actions/workflows/code-analysis.yml "CodeQL Analysis")
+[![nuget package](https://buildstats.info/nuget/AntiLdapInjection)](https://www.nuget.org/packages/AntiLdapInjection 'nuget package')
+[![ci build status](https://github.com/jonlabelle/AntiLdapInjection/actions/workflows/ci.yml/badge.svg)](https://github.com/jonlabelle/AntiLdapInjection/actions/workflows/ci.yml 'ci build status')
+[![cd release status](https://github.com/jonlabelle/AntiLdapInjection/actions/workflows/cd.yml/badge.svg)](https://github.com/jonlabelle/AntiLdapInjection/actions/workflows/cd.yml 'cd release status')
 
 A .NET library that provides protections against LDAP Injection.