Skip to content
This repository has been archived by the owner on Aug 30, 2024. It is now read-only.

Commit

Permalink
Apply workaround for clojure NVD bug
Browse files Browse the repository at this point in the history
  • Loading branch information
remvee committed Aug 1, 2024
1 parent 859ced5 commit c61917a
Showing 1 changed file with 3 additions and 5 deletions.
8 changes: 3 additions & 5 deletions .github/workflows/dependency-vulnerabilities.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,9 +27,7 @@ jobs:
with:
path: |
./.m2
./bin
./lib
# store as today's cache
key: "nvd-clojure-${{ steps.date.outputs.date }}"
# if today's cache does not yet exist, fetch from whatever iss
Expand All @@ -41,7 +39,7 @@ jobs:
run: .github/workflows/install-binaries.sh

- name: Install NVD clojure
run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd;
run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd

- name: Check that NVD Secret is set
env:
Expand All @@ -53,4 +51,4 @@ jobs:
env:
NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
working-directory: ishare-jwt
run: ../bin/clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :config-filename '".nvd-config.edn"' :classpath "\"$(../bin/clojure -Spath)\""
run: ../bin/clojure -J-Dclojure.main.report=stderr -Sdeps '{:deps {org.owasp/dependency-check-maven {:mvn/version "10.0.2"}}}' -Tnvd nvd.task/check :config-filename '".nvd-config.json"' :classpath "\"$(../bin/clojure -Spath)\""

0 comments on commit c61917a

Please sign in to comment.