import model.TestCoverage

fun buildScanTagParam(tag: String) = """-Dscan.tag.$tag"""
fun buildScanCustomValueParam(key: String, value: String) = """-Dscan.value.$key=$value"""

fun TestCoverage.asBuildScanCustomValue() =
    "${testType.name.toCapitalized()}${testJvmVersion.name.toCapitalized()}${vendor.displayName}${os.asName()}${arch.asName()}"

// Generates a build scan custom value "PartOf=X,Y,Z"

                "-PtestJavaVendor=openjdk",
                "-Dscan.tag.FunctionalTest",
                "-Dscan.value.coverageOs=windows",
                "-Dscan.value.coverageArch=amd64",
                "-Dscan.value.coverageJvmVendor=openjdk",
                "-Dscan.value.coverageJvmVersion=java23",
                "-PflakyTests=exclude",
                "-Dscan.tag.Check",
                "-PteamCityBuildId=%teamcity.build.id%",

		// There is one final token to be delivered, which may be the empty string.
		// Returning bufio.ErrFinalToken here tells Scan there are no more tokens after this
		// but does not trigger an error to be returned from Scan itself.
		return 0, data, bufio.ErrFinalToken
	}
	scanner.Split(onComma)
	// Scan.
	for scanner.Scan() {
		fmt.Printf("%q ", scanner.Text())
	}
	if err := scanner.Err(); err != nil {

name: OSV-Scanner Scheduled Scan

on:
  schedule:
    - cron: 0 4 * * 1

permissions:
  # Require writing security events to upload SARIF file to security tab
  security-events: write
  # Only need to read contents
  contents: read

jobs:
  scan-scheduled:
    if: github.repository == 'tensorflow/tensorflow'

      description: What version of Gradle are you running?
    validations:
      required: true
  - type: input
    id: build-scan-url
    attributes:
      label: Build scan URL (optional)
      description: |
        You can run your build command with `--scan` to publish a Build Scan to [scans.gradle.com](https://scans.gradle.com/).
    validations:
      required: false
  - type: textarea
    id: environment

      description: What version of Gradle gives proper result for your case?
    validations:
      required: true
  - type: input
    id: build-scan-url
    attributes:
      label: Build scan URL (optional)
      description: |
        You can run your build command with `--scan` to publish a Build Scan to [scans.gradle.com](https://scans.gradle.com/).
    validations:
      required: false
  - type: textarea
    id: environment

            "%additional.gradle.parameters%",
            "--daemon",
            "--continue",
            "-DbuildScan.PartOf=PullRequestFeedback,ReadyforNightly,ReadyforRelease",
            "-Dscan.tag.PerformanceTest"
        )

        assertEquals(
            (
                listOf(
                    "clean",
                    ":performance:largeTestProjectPerformanceTest",

		return "", d.mkError(ErrSyntax, "in string escape code")
	}
	c = d.next()
	goto scan

scan_u:
	r := d.u4()
	if r < 0 {
		return "", d.mkError(ErrSyntax, "in unicode escape sequence")
	}

	// check for proceeding surrogate pair
	c = d.next()
	if !utf16.IsSurrogate(r) || c != '\\' {
		d.scratch.addRune(r)
		goto scan
	}
	if c = d.next(); c != 'u' {
		d.scratch.addRune(r)
		goto scan_esc
	}

        return "-Dorg.gradle.workers.max=%maxParallelForks% -PmaxParallelForks=%maxParallelForks% $pluginPortalUrlOverride -s --no-configuration-cache %additional.gradle.parameters% $daemon --continue $extraParameters -Dscan.tag.Check -Dscan.tag.PullRequestFeedback -PteamCityBuildId=%teamcity.build.id% \"$expectedInstallationPaths\" -Porg.gradle.java.installations.auto-download=false -Porg.gradle.java.installations.auto-detect=false"
    }

        # Prefix the list here with "+" to use these queries and those in the config file.
        # queries: ./path/to/local/query, your-org/your-repo/queries@main

    - name: Compile with Gradle with Build Scan
      if: ${{ matrix.language == 'java' && github.repository_owner == 'gradle' }}
      run: ./gradlew --init-script .github/workflows/codeql-analysis.init.gradle -DcacheNode=us -S testClasses -Dhttp.keepAlive=false
      env: