chore: prepare monorepo for cn (#63)

* chore: bump version to 1.0.0_b7 (#24)

* chore: bump version to 1.0.0_b7

* fix: missing previous_version

* ci(workflows): sync central workflows (#35)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b7 (#33)

* chore: bump version to 1.0.0_b7

* fix: missing previous_version

* ci(workflows): sync central workflows (#41)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b7 (#39)

* chore(deps): upgrade jetty (#46)

closes #45

* chore(deps): upgrade jetty (#30)

closes #29

* chore(deps): upgrade jetty (#32)

closes #31

* chore(deps): upgrade jetty (#37)

closes #36

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#33)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#34)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#30)

* ci(workflows): sync central workflows (#55)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#54)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* Release 1.0.0 b8 (#52)

* chore: sync interception scripts

* chore: sync templates

* chore: bump version to 1.0.0_b8

* ci(workflows): sync central workflows (#32)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#31)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#28)

* ci(workflows): sync central workflows (#35)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#34)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#33)

* ci(workflows): sync central workflows (#39)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#38)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#35)

* ci(workflows): sync central workflows (#30)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#29)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#28)

* ci(workflows): sync central workflows (#39)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#38)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#37)

* ci(workflows): sync central workflows (#48)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#47)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b8 (#44)

* fix: sync config (#57)

* fix: add default path for couchbase truststore

* chore: update alpine (#43)

* chore: update alpine (#44)

* chore: update alpine (#66)

* chore: update alpine (#48)

* chore: update alpine (#57)

* chore: update alpine (#49)

* chore: update alpine (#40)

* chore: update alpine (#41)

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#44)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#38)

* Release 1.0.0 b9 (#61)

* fix: add missing rpId attribute type

* chore: sync interception scripts

* fix: revise stat-related entries

* chore: bump version to 1.0.0_b9

* ci(workflows): sync central workflows (#67)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#36)

* ci(workflows): sync central workflows (#42)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#39)

* ci(workflows): sync central workflows (#45)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#44)

* ci(workflows): sync central workflows (#50)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#35)

Co-authored-by: Mohammad Abudayyeh <47318409+moabu@users.noreply.github.com>

* ci(workflows): sync central workflows (#41)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#43)

Co-authored-by: Mohammad Abudayyeh <47318409+moabu@users.noreply.github.com>

* ci(workflows): sync central workflows (#49)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: bump version to 1.0.0_b9 (#52)

* ci(workflows): sync central workflows (#58)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: test new jetty

* chore: test jetty 11

* chore: test jetty 10

* fix: revert changes

* fix: parse ldif files using ldif package. (#70)

Replacing ldif3 package in favor of ldif package solves issue #69

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: release b10

* chore: release b10

* chore: release b10

* chore: release b10

* chore: release b10

* chore: release b10

* chore: release b10

* chore: release b10

* feat: serve app using jetty 10 (#63)

* feat: serve app using jetty 10

* chore: update jans-auth-server

* chore: update alpine image

Co-authored-by: Mohammad Abudayyeh <47318409+moabu@users.noreply.github.com>

* chore: revert alpine update

* ci(workflows): sync central workflows (#61)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#60)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* Delete scanimage.yml

* ci(workflows): sync central workflows (#48)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#47)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#44)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#43)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* feat: serve app using jetty 10 (#49)

* feat: serve app using jetty 10

* fix: doctype for jans-scim

* chore: update jans-scim-server

* ci(workflows): sync central workflows (#47)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#46)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* feat: serve app using jetty 10 (#47)

* feat: serve app using jetty 10

* chore: update jans-fido2-server

* ci(workflows): sync central workflows (#45)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#44)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#52)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#51)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* feat: serve app using jetty 10 (#55)

* feat: serve app using jetty 10

* fix: doctype for jans-config-api

* chore: update jans-config-api-server

* ci(workflows): sync central workflows (#53)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#52)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#72)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#71)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#56)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#51)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#65)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#49)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#51)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#53)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#53)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#76)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#74)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#51)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#57)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#49)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#47)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#56)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#55)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#67)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#55)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#54)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#79)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#78)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#53)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#52)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#55)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#54)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#60)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#59)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#51)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#50)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#59)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#58)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#69)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#68)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#28)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#56)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#80)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#54)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#61)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#52)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#60)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#70)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#56)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: sync setup and manifests from CE (#81)

* feat: disable old GUI client (#57)

* feat: encode plain password

* feat: add CLI command to decode text from a file

* feat: add CLI command to decode text string

* refactor: remove code smells

* refactor: add function to secure password file

* fix: raise proper exit code

* test: add testcases for cli.encoding module

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#59)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#73)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#84)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#60)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#64)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* fix: suppress warning on missing libs (#53)

* ci(workflows): sync central workflows (#56)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#64)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#57)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: update jython and alpine base image (#74)

* chore: update jython and alpine base image (#60)

* chore: update alpine base image (#58)

* chore: update alpine base image (#61)

* chore: update alpine base image (#85)

* chore: update alpine base image (#65)

* chore: update alpine base image (#65)

* chore: update alpine base image (#57)

* chore: sync manifests from ce (#86)

* chore: sync manifests from ce

* chore: sync manifests

* feat: add loggers configuration (#61) (#62)

* feat: add loggers configuration (#61)

* fix: change path of custom log4j2.xml

* feat: add loggers configuration (#59) (#60)

* feat: add loggers configuration (#59)

* fix: log target and level for Root

* docs: fix README

* feat: add loggers configuration (#58) (#59)

* feat: add loggers configuration (#66) (#67)

* feat: add loggers configuration (#66)

* docs: fix README

* feat: add loggers configuration (#75) (#76)

* feat: add loggers configuration (#75)

* docs: fix relative URL to loggers configuration

* fix: change path of custom log4j2.xml

* fix: loggers for Root and audit

* chore: release b12 (#77)

* chore: release b12

* chore: update war

* chore: release b12 (#63)

* chore: release b12 (#61)

* chore: release b12 (#68)

* chore: release b12 (#87)

* chore: release b12 (#62)

* chore: release b12 (#66)

* chore: release b12 (#60)

* chore: prepare rerelease of b12

* fix: handle non-writable password file

* ci(workflows): sync central workflows

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#79)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#67)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#62)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#70)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#63)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#90)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* ci(workflows): sync central workflows (#65)

Signed-off-by: mo-auto <54212639+mo-auto@users.noreply.github.com>

* chore: replace configuration-manager with configurator (#64)

* chore: prepare monorepo

* refactor: prepare monorepo

* refactor: prepare for monorepo

* refactor: prepare for monorepo

* refactor: prepare for monorepo

* refactor: prepare for monorepo

* refactor: prepare for monorepo

* refactor: prepare for monorepo

* ci: remove unnecessary workflows

* refactor: prepare for monorepo

* ci: fix remove execution of repos from non jvm

* ci: fix automation

* ci: fix docker scan

* ci: fix docker workflows

* ci: fix build, image and testcases

* ci: fix paths

* ci: skip azure scan error

* ci: push initial release strategy

* ci: adjust job names

* ci: add default images

* ci: fix context

* ci: run one by one

* ci: run parallel executions

* fix: get version from version py file

* ci: add workflow to manage updating jans-pycloud for docker images

* ci: fix workflow name

* ci: remove branch ignore

* ci: move envs to correct place

* ci: remove duplicate ids

* ci: fix EOF command

* fix: echo output to file

* fix: remove matrix strategy

* ci: move gh commands after setting config

* ci: add GITHUB TOKEN

* ci: skip opening PR if non is found

* ci: fix github user

* ci: fix typo in label

Co-authored-by: Isman Firmansyah <iromli@users.noreply.github.com>
Co-authored-by: mo-auto <54212639+mo-auto@users.noreply.github.com>
Co-authored-by: iromli <isman.firmansyah@gmail.com>

.github/workflows/central_code_quality_check.yml

@@ -30,15 +30,6 @@ jobs:
       NON_JVM_PROJECTS: |
         JanssenProject/jans-setup
         JanssenProject/jans-cli
-        JanssenProject/docker-jans-persistence-loader
-        JanssenProject/docker-jans-client-api
-        JanssenProject/jans-pycloudlib
-        JanssenProject/docker-jans-auth-server
-        JanssenProject/docker-jans-fido2
-        JanssenProject/docker-jans-scim
-        JanssenProject/docker-jans-config-api
-        JanssenProject/docker-jans-certmanager
-        JanssenProject/docker-jans-configuration-manager
         JanssenProject/jans-cloud-native
     steps:
       - uses: actions/checkout@v2

.github/workflows/central_sync_workflows.yml

@@ -28,15 +28,6 @@ jobs:
         env:
           #  JanssenProject/home
           REPOSITORIES: |
-            JanssenProject/docker-jans-auth-server
-            JanssenProject/docker-jans-certmanager
-            JanssenProject/docker-jans-client-api
-            JanssenProject/docker-jans-config-api
-            JanssenProject/docker-jans-configuration-manager
-            JanssenProject/docker-jans-fido2
-            JanssenProject/docker-jans-persistence-loader
-            JanssenProject/docker-jans-scim
-            JanssenProject/jans-pycloudlib
             JanssenProject/docs
             JanssenProject/jans-auth-server
             JanssenProject/jans-bom
@@ -63,32 +54,6 @@ jobs:
           chmod u+x org_workflows_sync.sh
           bash org_workflows_sync.sh
 
-      - name: Running Docker Workflow Sync
-        env:
-          REPOSITORIES: |
-            JanssenProject/docker-jans-auth-server
-            JanssenProject/docker-jans-certmanager
-            JanssenProject/docker-jans-client-api
-            JanssenProject/docker-jans-config-api
-            JanssenProject/docker-jans-configuration-manager
-            JanssenProject/docker-jans-fido2
-            JanssenProject/docker-jans-persistence-loader
-            JanssenProject/docker-jans-scim
-          WORKFLOW_FILES: |
-            .github/docker/central_docker_imagescan.yml=.github/workflows/imagescan.yml
-            .github/docker/central_docker_release.yml=.github/workflows/release.yml
-            .github/docker/central_docker_triggerdevbuild.yml=.github/workflows/triggerdevbuild.yml
-            .github/docker/central_docker_build_image.yml=.github/workflows/build_image.yml
-            .github/docker/central_docker_dependabot.yml=.github/dependabot.yml
-          GITHUB_TOKEN: ${{ secrets.MOWORKFLOWTOKEN }}
-          GPG_KEY_ID: ${{ steps.import_gpg.outputs.keyid }}
-          PR_BRANCH_NAME: docker_repo_sync
-        run: |
-          echo
-          wget https://raw.githubusercontent.com/mo-auto/scripts/main/org_workflows_sync.sh
-          chmod u+x org_workflows_sync.sh
-          bash org_workflows_sync.sh
-
       - name: Running CODEOWNERS Workflow Sync
         env:
           GITHUB_TOKEN: ${{ secrets.MOWORKFLOWTOKEN }}

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,69 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+name: "CodeQL"
+
+on:
+  push:
+    branches: [master]
+    paths:
+      - "jans-pycloudlib/jans/**"
+      - "jans-pycloudlib/tests/**"
+      - "jans-pycloudlib/setup.py"
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [master]
+    paths:
+      - "jans-pycloudlib/jans/**"
+      - "jans-pycloudlib/tests/**"
+      - "jans-pycloudlib/setup.py"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Override automatic language detection by changing the below list
+        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
+        language: ['python']
+        # Learn more...
+        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+        queries: +security-extended,security-and-quality
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1