Skip to content

Commit e1acefc

Browse files
committed
chore: don't run dependency check everytime (NVD API limits) but using CI instead
1 parent 16cce27 commit e1acefc

File tree

2 files changed

+19
-14
lines changed

2 files changed

+19
-14
lines changed

.github/workflows/continuous-integration-workflow.yml

Lines changed: 1 addition & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -93,17 +93,4 @@ jobs:
9393
# steps:
9494
# - uses: actions/checkout@v3
9595
# - name: Build latest
96-
# run: ./gha_build.sh struts true true
97-
98-
owasp-dependency-check:
99-
name: Verify dependencies with OWASP checker
100-
runs-on: ubuntu-latest
101-
steps:
102-
- uses: actions/checkout@v3
103-
- name: Set up JDK 17
104-
uses: actions/setup-java@v3
105-
with:
106-
distribution: 'corretto'
107-
java-version: 17
108-
- name: Build latest
109-
run: mvn -q org.owasp:dependency-check-maven:check
96+
# run: ./gha_build.sh struts true true
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: OWASP dependency check
2+
on:
3+
schedule:
4+
- cron: "10 10 * * 3"
5+
6+
jobs:
7+
owasp-dependency-check:
8+
name: Verify dependencies with OWASP checker
9+
runs-on: ubuntu-latest
10+
steps:
11+
- uses: actions/checkout@v3
12+
- name: Set up JDK 17
13+
uses: actions/setup-java@v3
14+
with:
15+
distribution: 'corretto'
16+
java-version: 17
17+
- name: Build latest
18+
run: mvn -q package org.owasp:dependency-check-maven:check

0 commit comments

Comments
 (0)