java-tron/.github/workflows/dependency-check.yml at beb22abeaf00bd43f49e4db59e6b56ca04e1aeed · halibobo1205/java-tron · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
name: "Dependency Check"

on:
  push:
    branches: [ 'develop', 'master', 'release_**' ]
  pull_request:
    branches: [ 'develop' ]
  schedule:
    - cron: '0 6 * * *'

jobs:
  dependency-check:
    name: Dependency Check
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Cache ODC data
        uses: actions/cache@v3
        with:
          path: ~/.dependency-check/data
          key: ${{ runner.os }}-odc-data-${{ hashFiles('**/build.gradle') }}
          restore-keys: |
            ${{ runner.os }}-odc-data-

      - name: Autobuild
        uses: github/codeql-action/autobuild@v3

      - name: Dependency Check
        uses: dependency-check/Dependency-Check_Action@1.1.0
        with:
          project: 'java-tron'
          scan: '.'
          format: 'HTML'
          out: 'reports'
          fail_on_severity: 'critical'
          suppressionFile: '.github/dependency-check-suppressions.xml'

      - name: Upload report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: dependency-check-report
          path: ${{github.workspace}}/reports