codeql-analysis.yml

name: "Code scanning - action"

on:
  push:
  pull_request:
  schedule:
    - cron: '0 18 * * 1'

jobs:
  CodeQL-Build:

    runs-on: ubuntu-latest

    env:
      # Use cached CRL data only for cert revocation checks. Works around
      # NU3012 ("certificate revoked") for transitive ReactiveUI / Splat 19.3.1
      # packages whose author certificate was revoked at the CA in 2026-Q2.
      # Revert this env var once the affected packages are re-signed.
      NUGET_CERT_REVOCATION_MODE: offline

    steps:
    - name: Checkout repository
      uses: actions/checkout@v6.0.2
      with:
        # We must fetch at least the immediate parents so that if this is
        # a pull request then we can checkout the head.
        fetch-depth: 2
  
    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
      uses: github/codeql-action/init@v3
      # Override language selection by uncommenting this and choosing your languages
      with:
        languages: csharp

    - name: Setup .NET Core
      uses: actions/setup-dotnet@v5.1.0
      with:
        dotnet-version: '10.0.x'
    - name: Install dependencies
      run: dotnet restore
    - name: Build
      run: dotnet build --configuration Release --no-restore

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@v3