Skip to content

Source Code SBOM - Dependency Check #6

Source Code SBOM - Dependency Check

Source Code SBOM - Dependency Check #6

name: Source Code SBOM - Dependency Check
on:
workflow_dispatch:
inputs:
src_repository:
description: 'Source Repository'
required: true
default: ''
src_branch:
description: 'Branch'
required: false
default: ''
jobs:
depchecktest:
runs-on: ubuntu-latest
name: depecheck_test
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
repository: ${{ inputs.src_repository }}
ref: ${{ inputs.src_branch }}
#- name: Build project with Maven
# run: mvn package -Dmaven.test.skip=true
#run: mvn clean build
- name: Depcheck
uses: dependency-check/Dependency-Check_Action@main
id: Depcheck
with:
project: 'test'
path: '.'
format: 'HTML'
out: 'reports' # this is the default, no need to specify unless you wish to override it
args: >
--failOnCVSS 7
--enableRetired
- name: Upload Test results
uses: actions/upload-artifact@master
with:
name: Depcheck report
path: ${{github.workspace}}/reports