From 45525911e9d0bc41ad8ec7baa829b82b5a7d2af9 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 14 Aug 2026 11:18:04 +0000 Subject: [PATCH 1/4] Initial plan From c632deedb44bcd9faad0f176eaa373213379d2ce Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 14 Aug 2026 11:19:28 +0000 Subject: [PATCH 2/4] Replace autobuild with explicit Maven build in CodeQL workflow Co-authored-by: thomasturrell <1552612+thomasturrell@users.noreply.github.com> --- .github/workflows/codeql.yml | 16 ++-------------- 1 file changed, 2 insertions(+), 14 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 96d8fa9f..f974389a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -74,20 +74,8 @@ jobs: # queries: security-extended,security-and-quality - # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). - # If this step fails, then you should remove it and run the build manually (see below) - - name: Autobuild - uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 - - # ℹī¸ Command-line programs to run using the OS shell. - # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun - - # If the Autobuild fails above, remove it and uncomment the following three lines. - # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance. - - # - run: | - # echo "Run, Build Application using script" - # ./location_of_script_within_repo/buildscript.sh + - name: Build + run: ./mvnw clean verify -DskipTests - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 From 2605362be1d2ae1f7a740dcca2dee56a5ad7abe0 Mon Sep 17 00:00:00 2001 From: Thomas Turrell-Croft Date: Fri, 14 Aug 2026 13:06:01 +0100 Subject: [PATCH 3/4] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f974389a..015ef302 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -75,7 +75,7 @@ jobs: - name: Build - run: ./mvnw clean verify -DskipTests + run: ./mvnw -B clean verify -DskipTests - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 From 4e354517779a17e8a638c1528f55d752165d9263 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 14 Aug 2026 12:17:52 +0000 Subject: [PATCH 4/4] Fix CodeQL workflow: use consistent action version for init and analyze steps Co-authored-by: thomasturrell <1552612+thomasturrell@users.noreply.github.com> --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 015ef302..97c3d211 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -62,7 +62,7 @@ jobs: # Initializes the CodeQL tools for scanning. # Uses custom configuration file to exclude test directories from analysis. - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 with: languages: ${{ matrix.language }} config-file: ./.github/codeql-config.yml