Skip to content

Commit

Permalink
dependency-check
Browse files Browse the repository at this point in the history
  • Loading branch information
133tosakarin committed Dec 2, 2024
1 parent 68daea6 commit 99d13a5
Show file tree
Hide file tree
Showing 2 changed files with 74 additions and 1 deletion.
69 changes: 69 additions & 0 deletions .github/workflows/vulnerability-scanning.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
name: Weekly Check
on:
schedule:
# Run at UTC 19:00 every day (CST 03:00 AM)
- cron: '0 0 * * 0'
push:
branches:
- master
- 'rel/*'
- "rc/*"
paths-ignore:
- 'docs/**'
- 'site/**'
pull_request:
branches:
- master
- 'rel/*'
- "rc/*"
paths-ignore:
- 'docs/**'
- 'site/**'
# allow manually run the action:
workflow_dispatch:

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

env:
MAVEN_OPTS: -Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false -Dmaven.wagon.http.retryHandler.class=standard -Dmaven.wagon.http.retryHandler.count=3
MAVEN_ARGS: --batch-mode --no-transfer-progress
DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}

jobs:
dependency-check:
strategy:
fail-fast: false
max-parallel: 15
matrix:
java: [ 17 ]
os: [ ubuntu-latest ]
runs-on: ${{ matrix.os }}

steps:
- uses: actions/checkout@v4
- name: Set up JDK ${{ matrix.java }}
uses: actions/setup-java@v4
with:
distribution: corretto
java-version: ${{ matrix.java }}
- name: Cache Maven packages
uses: actions/cache@v4
with:
path: ~/.m2
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
restore-keys: ${{ runner.os }}-m2-
- name: Do the dependency-check:check
shell: bash
run: mvn org.owasp:dependency-check-maven:check
- name: Do the dependency-check:aggregate
shell: bash
run: mvn org.owasp:dependency-check-maven:aggregate
- name: Upload Artifact
if: failure()
uses: actions/upload-artifact@v4
with:
name: dependency-check${{ matrix.java }}-${{ runner.os }}
path: target/dependency-check-report.html
retention-days: 7
6 changes: 5 additions & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -713,6 +713,11 @@
<artifactId>error_prone_annotations</artifactId>
<version>2.18.0</version>
</dependency>
<dependency>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>11.1.0</version>
</dependency>
<!-- Conflict:
jackson-json-provider (pulls in 2.15.2),
jackson-databind (pulls in 2.15.2),
Expand Down Expand Up @@ -1979,7 +1984,6 @@
</execution>
</executions>
</plugin>
<!-- overwrite argLine-->
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
Expand Down

0 comments on commit 99d13a5

Please sign in to comment.