Skip to content

Commit

Permalink
chore: don't run dependency check everytime (NVD API limits) but usin…
Browse files Browse the repository at this point in the history
…g CI instead
  • Loading branch information
deki committed Jan 26, 2024
1 parent 16cce27 commit e1acefc
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 14 deletions.
15 changes: 1 addition & 14 deletions .github/workflows/continuous-integration-workflow.yml
Original file line number Diff line number Diff line change
Expand Up @@ -93,17 +93,4 @@ jobs:
# steps:
# - uses: actions/checkout@v3
# - name: Build latest
# run: ./gha_build.sh struts true true

owasp-dependency-check:
name: Verify dependencies with OWASP checker
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Set up JDK 17
uses: actions/setup-java@v3
with:
distribution: 'corretto'
java-version: 17
- name: Build latest
run: mvn -q org.owasp:dependency-check-maven:check
# run: ./gha_build.sh struts true true
18 changes: 18 additions & 0 deletions .github/workflows/owasp-dependency-check.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
name: OWASP dependency check
on:
schedule:
- cron: "10 10 * * 3"

jobs:
owasp-dependency-check:
name: Verify dependencies with OWASP checker
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Set up JDK 17
uses: actions/setup-java@v3
with:
distribution: 'corretto'
java-version: 17
- name: Build latest
run: mvn -q package org.owasp:dependency-check-maven:check

0 comments on commit e1acefc

Please sign in to comment.