ci(detekt): define temp directory

.github/workflows/detekt.yml

@@ -32,8 +32,9 @@ env:
   # Release tag associated with version of Detekt to be installed
   # SARIF support (required for this workflow) was introduced in Detekt v1.15.0
   DETEKT_RELEASE_TAG: "1.23.4"
-  DETEKT_FILE_NAME: "detekt-cli-${DETEKT_VERSION}-all.jar"
-  DETEKT_URL: "https://github.com/detekt/detekt/releases/download/v${DETEKT_VERSION}/${DETEKT_FILE_NAME}"
+  DETEKT_FILE_NAME: "detekt-cli-$DETEKT_VERSION-all.jar"
+  DETEKT_URL: "https://github.com/detekt/detekt/releases/download/v$DETEKT_VERSION/$DETEKT_FILE_NAME"
+  DETEKT_DIRECTORY: "${{ runner.temp }}/detekt/lib/"
 
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
@@ -64,19 +65,18 @@ jobs:
     # Sets up the detekt cli
     - name: Setup Detekt
       run: |
-        dest=$( mktemp -d )
         curl --request GET \
-          --url ${DETEKT_URL} \
+          --url $DETEKT_URL \
           --silent \
           --location \
-          --output $dest/${DETEKT_FILE_NAME}
-        mv $dest/${DETEKT_FILE_NAME} $dest/detekt.jar
+          --output $DETEKT_DIRECTORY/$DETEKT_FILE_NAME
+        mv $DETEKT_DIRECTORY/$DETEKT_FILE_NAME $DETEKT_DIRECTORY/detekt.jar
 
     # Performs static analysis using Detekt
     - name: Run Detekt
       continue-on-error: true
       run: |
-        java -jar $dest/detekt.jar --input ${{ github.workspace }} --report sarif:${{ github.workspace }}/detekt.sarif.json
+        java -jar $DETEKT_DIRECTORY/detekt.jar --input ${{ github.workspace }} --report sarif:${{ github.workspace }}/detekt.sarif.json
 
     # Modifies the SARIF output produced by Detekt so that absolute URIs are relative
     # This is so we can easily map results onto their source files