[security] Setup CodeQL for `java-kotlin`

david-allison commented 2 weeks ago

  [2024-04-21 16:44:07] [autobuild] ERROR: AnkiDroid builds with JVM version 17 or 21.
  [2024-04-21 16:44:07] [autobuild]   Incompatible major version detected: '11'

https://github.com/ankidroid/Anki-Android/actions/runs/8774109064

I believe this should be defined by codeql-analysis.yml. We are currently using default values, and this seems to not have been created.

According to https://redirect.github.com/github/codeql-action/issues/97 , we can use: setup-java, I suspect:

    - name: Setup Java JDK
      uses: actions/setup-java@v4.2.1
      with:
        java-version: 21

david-allison commented 2 weeks ago

Steps to generate the workflow:

https://github.com/ankidroid/Anki-Android/settings/security_analysis
CodeQL analysis
Switch to advanced

Screenshot 2024-04-28 at 00 33 29

It's late here... tomorrow

david-allison commented 1 week ago

I'll block this on https://github.com/github/codeql-action/issues/1855

ankidroid / Anki-Android

[security] Setup CodeQL for `java-kotlin` #16286