From b37251e8d54cc8b683b85e5945c55552fb79c7e3 Mon Sep 17 00:00:00 2001
From: Satoshi Qazi Muhammed <info@pezkuwichain.io>
Date: Tue, 3 Nov 2026 04:52:34 +0400
Subject: [PATCH] Build for CodeQL without Gradle and Kotlin daemons so the
 analysis has the memory

---
 .github/workflows/security.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index ed4fe53a..28f87cbd 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -85,7 +85,11 @@ jobs:
 
       - name: Build for CodeQL
         if: matrix.build-mode == 'manual'
-        run: ./gradlew assembleDebug -x test -x lint
+        # No Gradle or Kotlin daemon is left running: the analysis after the build needs that memory, and
+        # with them alive the runner ran out of it during query evaluation.
+        run: |
+          ./gradlew assembleDebug -x test -x lint --no-daemon -Pkotlin.compiler.execution.strategy=in-process
+          free -m
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}