Skip to content

Commit beb22ab

Browse files
committed
feat(CI): add Dependency Check
1 parent e649699 commit beb22ab

File tree

1 file changed

+46
-0
lines changed

1 file changed

+46
-0
lines changed
Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
name: "Dependency Check"
2+
3+
on:
4+
push:
5+
branches: [ 'develop', 'master', 'release_**' ]
6+
pull_request:
7+
branches: [ 'develop' ]
8+
schedule:
9+
- cron: '0 6 * * *'
10+
11+
jobs:
12+
dependency-check:
13+
name: Dependency Check
14+
runs-on: ubuntu-latest
15+
16+
steps:
17+
- name: Checkout repository
18+
uses: actions/checkout@v4
19+
20+
- name: Cache ODC data
21+
uses: actions/cache@v3
22+
with:
23+
path: ~/.dependency-check/data
24+
key: ${{ runner.os }}-odc-data-${{ hashFiles('**/build.gradle') }}
25+
restore-keys: |
26+
${{ runner.os }}-odc-data-
27+
28+
- name: Autobuild
29+
uses: github/codeql-action/autobuild@v3
30+
31+
- name: Dependency Check
32+
uses: dependency-check/[email protected]
33+
with:
34+
project: 'java-tron'
35+
scan: '.'
36+
format: 'HTML'
37+
out: 'reports'
38+
fail_on_severity: 'critical'
39+
suppressionFile: '.github/dependency-check-suppressions.xml'
40+
41+
- name: Upload report
42+
if: always()
43+
uses: actions/upload-artifact@v4
44+
with:
45+
name: dependency-check-report
46+
path: ${{github.workspace}}/reports

0 commit comments

Comments
 (0)