Merge remote-tracking branch 'origin/main'

.github/workflows/main.yml

@@ -0,0 +1,24 @@
+name: Alipay Cloud Devops Codescan
+on:
+  pull_request_target:  
+jobs:
+  stc:   # 安全扫描
+    runs-on: ubuntu-latest
+    steps:
+      - name: codeScan
+        uses: layotto/alipay-cloud-devops-codescan@uat-test
+        with:
+          parent_uid: ${{ secrets.ALI_PID }}
+          private_key: ${{ secrets.ALI_PK }}
+          scan_type: stc  
+          tips: '请加入钉钉群'
+  sca:   # 开源合规
+    runs-on: ubuntu-latest
+    steps:
+      - name: codeScan
+        uses: layotto/alipay-cloud-devops-codescan@uat-test
+        with:
+          parent_uid: ${{ secrets.ALI_PID }}
+          private_key: ${{ secrets.ALI_PK }}
+          scan_type: sca
+          cachePullPushPolicy: always

pom.xml

@@ -138,7 +138,14 @@
             <version>3.10.2</version>
         </dependency>
 
+         <dependency>
+             <artifactId>gson</artifactId>
+             <groupId>com.google.code.gson</groupId>
+             <version>2.8.0</version>
+         </dependency>        
+
     </dependencies>
+
 
     <build>
         <plugins>
@@ -149,4 +156,4 @@
         </plugins>
     </build>
 
-</project>
+</project>