code-scanning-custom-analysis.yml

# Customise this workflow to perform the CodeQL analysis on the project(s) that have changed in a monorepo.

# ⚠️ This is an example and must be tuned for using in your own repository. ⚠️

# You can specify the CodeQL configuration and build steps for each project.

name: Analyze

on:
  workflow_call:
    inputs:
      language: 
        description: 'Language to analyze'
        required: true
        type: string
      codeql-config:
        description: 'CodeQL configuration'
        required: true
        type: string
      name:
        description: 'Name of the project'
        required: true
        type: string

jobs:
    custom-analysis:
      runs-on: ubuntu-latest
      steps:
        - name: Initialise for Java
          if: ${{ inputs.language == 'java-kotlin' }}
          uses: github/codeql-action/init@v3
          with:
            languages: java
            config: ${{ inputs.codeql-config }}

          # If you wish to specify custom queries, you can do so here or in a config file.
          # You can divide them up by project name in the .github folder, for example:
          # config-file: .github/${{ inputs.name }}/codeql-config.yml
 
          # By default, queries listed here will override any specified in a config file.
          # Prefix the list here with "+" to use these queries and those in the config file.
 
          # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
          # queries: security-extended,security-and-quality
  
      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun

        - name: Build for Java
          if: ${{ inputs.language == 'java-kotlin' && inputs.name == 'java-project-1' }}
          run: mvn -B package --file pom.xml
          shell: bash