From 59348919393e452d26ca8e9cbbf11a7a94c2cf12 Mon Sep 17 00:00:00 2001
From: Anton Hvornum <anton@hvornum.se>
Date: Wed, 30 Nov 2022 00:16:00 +0100
Subject: [PATCH] Adding a DependencyCheck runner. Mainly for future prep, when
 we start using external dependencies.

---
 .github/workflows/dependencycheck.yaml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .github/workflows/dependencycheck.yaml

diff --git a/.github/workflows/dependencycheck.yaml b/.github/workflows/dependencycheck.yaml
new file mode 100644
index 00000000..51bfb2d8
--- /dev/null
+++ b/.github/workflows/dependencycheck.yaml
@@ -0,0 +1,26 @@
+on: [ push, pull_request ]
+jobs:
+  depchecktest:
+    runs-on: ubuntu-latest
+    name: depecheck_test
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Build project with Maven
+        run: mvn clean install
+      - name: Depcheck
+        uses: dependency-check/Dependency-Check_Action@main
+        id: Depcheck
+        with:
+          project: 'archinstall'
+          path: '.'
+          format: 'HTML'
+          out: 'reports' # this is the default, no need to specify unless you wish to override it
+          args: >
+            --failOnCVSS 7
+            --enableRetired
+      - name: Upload Test results
+        uses: actions/upload-artifact@master
+        with:
+           name: Depcheck report
+           path: ${{github.workspace}}/reports
\ No newline at end of file