[LMyH0Fi7] apoc.systemdb.graph leaks passwords/hashes (#3414) #4023
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ "4.4" ] | |
| pull_request: | |
| branches: [ "4.4" ] | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| # required by CodeQL | |
| permissions: | |
| security-events: write | |
| actions: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v2 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v2 | |
| with: | |
| languages: java | |
| - name: Set up JDK 11 | |
| uses: actions/setup-java@v2 | |
| with: | |
| java-version: '11' | |
| distribution: 'temurin' | |
| - uses: actions/cache@v2 | |
| with: | |
| path: | | |
| ~/.gradle/caches | |
| ~/.gradle/wrapper | |
| key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }} | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Build with Gradle | |
| run: ./gradlew build | |
| - name: Check procedures included in apoc full | |
| run: git diff --exit-code full/src/main/resources/extended.txt || (echo "extended.txt file does not contain all changes" && exit -1) | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v2 | |
| - name: Archive test results | |
| uses: actions/upload-artifact@v2 | |
| if: always() | |
| with: | |
| name: test-results | |
| path: | | |
| core/build/reports/tests/test/ | |
| full/build/reports/tests/test/ | |
| processor/build/reports/tests/test/ | |
| test-startup/build/reports/tests/test/ | |
| test-utils/build/reports/tests/test/ |