Adding a DependencyCheck runner. Mainly for future prep, when we start using external dependencies.
This commit is contained in:
parent
126f56169d
commit
5934891939
|
|
@ -0,0 +1,26 @@
|
||||||
|
on: [ push, pull_request ]
|
||||||
|
jobs:
|
||||||
|
depchecktest:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
name: depecheck_test
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v2
|
||||||
|
- name: Build project with Maven
|
||||||
|
run: mvn clean install
|
||||||
|
- name: Depcheck
|
||||||
|
uses: dependency-check/Dependency-Check_Action@main
|
||||||
|
id: Depcheck
|
||||||
|
with:
|
||||||
|
project: 'archinstall'
|
||||||
|
path: '.'
|
||||||
|
format: 'HTML'
|
||||||
|
out: 'reports' # this is the default, no need to specify unless you wish to override it
|
||||||
|
args: >
|
||||||
|
--failOnCVSS 7
|
||||||
|
--enableRetired
|
||||||
|
- name: Upload Test results
|
||||||
|
uses: actions/upload-artifact@master
|
||||||
|
with:
|
||||||
|
name: Depcheck report
|
||||||
|
path: ${{github.workspace}}/reports
|
||||||
Loading…
Reference in New Issue