scan-dependencies-monolith.yml

name: Scan Dependencies Monolith

on:
  push:
    paths: 
      - 'src/Monolith/**'
  pull_request:
    paths: 
      - 'src/Monolith/**'
  schedule:
    - cron: '0 * * * *'

jobs:
  build:

    defaults: 
      run:
        working-directory: src/Monolith
        
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v2
    - name: Setup .NET Core
      uses: actions/setup-dotnet@v1
      with:
        dotnet-version: 8.0.100

    - name: Install Aspire
      run: dotnet workload install aspire

    - name: dotnet restore
      run: dotnet restore

    - name: dotnet list package --vulnerable
      run: dotnet list package --vulnerable