Bump org.jenkins-ci.main:jenkins-core from 2.485 to 2.487 #910

	name: "CodeQL"

	on:
	push:
	branches:
	- main
	pull_request_target:
	schedule:
	- cron: "32 3 * * 0"

	jobs:
	analyze:
	name: Analyze code
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write

	strategy:
	fail-fast: false
	matrix:
	language: [ java ]

	steps:
	- uses: actions/checkout@v4
	if: github.event_name == 'push'
	- uses: actions/checkout@v4
	with:
	ref: "${{ github.event.pull_request.merge_commit_sha }}"
	if: github.event_name == 'pull_request_target'

	- name: Setup Java
	uses: actions/setup-java@v4
	with:
	distribution: temurin
	java-version: 21
	cache: maven

	- name: Set up Maven
	uses: stCarolas/setup-maven@v5
	with:
	maven-version: 3.9.9

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: ${{ matrix.language }}
	queries: +security-and-quality

	- name: Build with Maven
	run: mvn -V --color always -ntp clean verify -Pskip

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3
	with:
	upload: false
	output: sarif-results
	category: "/language:${{ matrix.language }}"

	- name: Filter SARIF results
	uses: advanced-security/filter-sarif@v1
	with:
	patterns: \|
	-*/Assert*
	input: sarif-results/${{ matrix.language }}.sarif
	output: sarif-results/${{ matrix.language }}.sarif

	- name: Upload SARIF results
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: sarif-results/${{ matrix.language }}.sarif

Provide feedback