codeql-analysis.yml

name: "CodeQL Analysis"

on:
  push:
    branches: [main]

jobs:
  CodeQL-Build:
    runs-on: macos-latest
    if: ${{ github.actor != 'dependabot[bot]' }}
    env:
      # Force CodeQL to run the extraction on the files compiled by our custom
      # build command, as opposed to letting the autobuilder figure it out.
      # See: https://github.com/github/codeql-action/issues/1101#issuecomment-1157729589
      CODEQL_EXTRACTOR_GO_BUILD_TRACING: 'on'

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: "1.21.7"
          cache: false

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: go

      - name: Build Artifact
        run: |
          make otelcontribcol

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3
        timeout-minutes: 60