diff --git a/.github/workflows/dependencycheck.yaml b/.github/workflows/dependencycheck.yaml new file mode 100644 index 0000000000..51bfb2d8fa --- /dev/null +++ b/.github/workflows/dependencycheck.yaml @@ -0,0 +1,26 @@ +on: [ push, pull_request ] +jobs: + depchecktest: + runs-on: ubuntu-latest + name: depecheck_test + steps: + - name: Checkout + uses: actions/checkout@v2 + - name: Build project with Maven + run: mvn clean install + - name: Depcheck + uses: dependency-check/Dependency-Check_Action@main + id: Depcheck + with: + project: 'archinstall' + path: '.' + format: 'HTML' + out: 'reports' # this is the default, no need to specify unless you wish to override it + args: > + --failOnCVSS 7 + --enableRetired + - name: Upload Test results + uses: actions/upload-artifact@master + with: + name: Depcheck report + path: ${{github.workspace}}/reports \ No newline at end of file