codeql.yml

name: Compile and Analyze CoffeeScript with CodeQL

on: ['push','workflow_dispatch']

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write

    steps:
    - name: Checkout repository
      uses: actions/checkout@v4

    - name: Set up Node.js
      uses: actions/setup-node@v3
      with:
        node-version: '16'

    - name: Install CoffeeScript
      run: npm install -g coffeescript

#    - name: Compile CoffeeScript to JavaScript
#      run: |
#        find . -name "*.coffee" -exec coffee -c {} \;

    - name: Compile CoffeeScript to JavaScript
      run: |
        coffee --compile --map *.coffee

    - name: inspect directory
      run: | 
        ls -ls
        
    - name: Initialize CodeQL
      uses: github/codeql-action/init@v3
      with:
        languages: javascript

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@v3
      with:
        upload: False
        output: sarif-results
        add-snippets: true

    - name: Upload CodeQL Analysis
      uses: actions/upload-artifact@v3
      with:
        name: before-javascript.sarif
        path: sarif-results/javascript.sarif

    - name: Remap SARIF
      uses: advanced-security/remap-sarif@main
      with:
        sourceroot: src   # optional
        input: sarif-results/javascript.sarif
        output: sarif-results/javascript.sarif
      
    - name: Upload SARIF
      uses: github/codeql-action/upload-sarif@v3
      with:
        sarif_file: sarif-results/javascript.sarif

    - name: Upload CodeQL Analysis
      uses: actions/upload-artifact@v3
      with:
        name: after-javascript.sarif
        path: sarif-results/javascript.sarif