Skip to content

Commit

Permalink
Do dependency check only on scheduled builds
Browse files Browse the repository at this point in the history
  • Loading branch information
MediaMarco committed Dec 18, 2023
1 parent c30de1d commit 02cf64f
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -58,20 +58,19 @@ jobs:
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: Dependency check and build with gradle
if: ${{ github.event_name != 'pull_request' && github.event_name != 'merge_group' }}
if: ${{ github.event_name == 'schedule' }}
env:
NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
run: |
if [ -z "$NVD_API_KEY" ]; then echo "NVD API KEY is NULL"; else echo "NVD API key is not NULL"; fi
#./gradlew -DNVD_API_KEY="$NVD_API_KEY" dependencyCheckPurge dependencyCheckAggregate build
./gradlew build
./gradlew -DNVD_API_KEY="$NVD_API_KEY" dependencyCheckAggregate build
- name: Archive dependency check report
if: ${{ github.event_name != 'pull_request' && github.event_name != 'merge_group' }}
uses: actions/upload-artifact@v3
with:
name: dependency-check-report
path: build/reports/dependency-check-report.html
- name: Build with gradle
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
if: ${{ github.event_name != 'schedule' }}
run: |
./gradlew build

0 comments on commit 02cf64f

Please sign in to comment.