diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4bd4390..36ae7a7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,4 +1,7 @@ name: "CodeQL" +concurrency: + group: ${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true on: push: @@ -10,7 +13,7 @@ on: jobs: analyze: - name: Analyze + name: Analyze code runs-on: ubuntu-latest permissions: actions: read @@ -26,19 +29,16 @@ jobs: - name: Checkout repository uses: actions/checkout@v3 - # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: languages: ${{ matrix.language }} queries: +security-extended,security-and-quality - # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). - # If this step fails, then you should remove it and run the build manually - - name: Autobuild + - name: Build solution uses: github/codeql-action/autobuild@v2 - - name: Perform CodeQL Analysis + - name: Perform CodeQL analysis uses: github/codeql-action/analyze@v2 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/resharper.yml b/.github/workflows/resharper.yml new file mode 100644 index 0000000..bb3af6d --- /dev/null +++ b/.github/workflows/resharper.yml @@ -0,0 +1,40 @@ +name: "ReSharper" +concurrency: + group: ${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + +on: + push: + branches: [ "master" ] + pull_request: + branches: [ "master" ] + +jobs: + inspect-code: + name: Inspect code + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + + - name: Setup .NET Core SDK + uses: actions/setup-dotnet@v3.0.3 + + - name: Restore dependencies and tools + run: dotnet restore + + - name: ReSharper CLI InspectCode + uses: muno92/resharper_inspectcode@1.6.0 + with: + solutionPath: ./Boyfriend-CSharp.sln + exclude: | + **Messages.Designer.cs + solutionWideAnalysis: true