Merge pull request #10 from Messaging-Application/owasp

Owasp

.github/workflows/main.yml

@@ -11,10 +11,12 @@ jobs:
     name: gitleaks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout code
+        uses: actions/checkout@v3
         with:
           fetch-depth: 0
-      - uses: gitleaks/gitleaks-action@v2
+      - name: Run Gitleaks
+        uses: gitleaks/gitleaks-action@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}}
@@ -32,6 +34,21 @@ jobs:
       run: npm run lint
     - name: Run unit tests
       run: npm run test
+    - name: Dependency Check
+      uses: dependency-check/Dependency-Check_Action@main
+      with:
+        project: 'messaging-app'
+        path: '.'
+        format: 'HTML'
+        out: 'reports' 
+        args: >
+          --failOnCVSS 7
+          --enableRetired
+    - name: Upload Dependency Check Test results
+      uses: actions/upload-artifact@master
+      with:
+        name: Dependency Check report
+        path: ${{github.workspace}}/reports
     - name: Login to Docker Hub
       uses: docker/[email protected]
       with: