Adding a DependencyCheck runner. Mainly for future prep, when we start using external dependencies.
This commit is contained in:
parent
126f56169d
commit
5934891939
|
|
@ -0,0 +1,26 @@
|
|||
on: [ push, pull_request ]
|
||||
jobs:
|
||||
depchecktest:
|
||||
runs-on: ubuntu-latest
|
||||
name: depecheck_test
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v2
|
||||
- name: Build project with Maven
|
||||
run: mvn clean install
|
||||
- name: Depcheck
|
||||
uses: dependency-check/Dependency-Check_Action@main
|
||||
id: Depcheck
|
||||
with:
|
||||
project: 'archinstall'
|
||||
path: '.'
|
||||
format: 'HTML'
|
||||
out: 'reports' # this is the default, no need to specify unless you wish to override it
|
||||
args: >
|
||||
--failOnCVSS 7
|
||||
--enableRetired
|
||||
- name: Upload Test results
|
||||
uses: actions/upload-artifact@master
|
||||
with:
|
||||
name: Depcheck report
|
||||
path: ${{github.workspace}}/reports
|
||||
Loading…
Reference in New Issue