Adding a DependencyCheck runner. Mainly for future prep, when we start using external dependencies.

This commit is contained in:
Anton Hvornum 2022-11-30 00:16:00 +01:00
parent 126f56169d
commit 5934891939
No known key found for this signature in database
GPG Key ID: F1234C5BA67C59DF
1 changed files with 26 additions and 0 deletions

26
.github/workflows/dependencycheck.yaml vendored Normal file
View File

@ -0,0 +1,26 @@
on: [ push, pull_request ]
jobs:
depchecktest:
runs-on: ubuntu-latest
name: depecheck_test
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Build project with Maven
run: mvn clean install
- name: Depcheck
uses: dependency-check/Dependency-Check_Action@main
id: Depcheck
with:
project: 'archinstall'
path: '.'
format: 'HTML'
out: 'reports' # this is the default, no need to specify unless you wish to override it
args: >
--failOnCVSS 7
--enableRetired
- name: Upload Test results
uses: actions/upload-artifact@master
with:
name: Depcheck report
path: ${{github.workspace}}/reports