mend.yml

name: mend

on:
  schedule:
    - cron: '0 0 * * *'
  pull_request_target:
    types:
      - opened
      - synchronize
  workflow_dispatch:

jobs:
  mend:
    runs-on: ubuntu-latest
    steps:
      # If we are on a PR, checkout the PR head sha, else checkout the default branch
      - name: "Set the checkout ref"
        id: set_ref
        run: |
          if [[ "${{ github.event_name }}" == "pull_request_target" ]]; then
            echo "ref=${{ github.event.pull_request.head.sha }}" >> $GITHUB_OUTPUT
          else
            echo "ref=${{ github.ref }}" >> $GITHUB_OUTPUT
          fi

      - uses: actions/checkout@v4
        with:
          ref: ${{ steps.set_ref.outputs.ref }}

      - uses: "actions/setup-java@v4"
        with:
          distribution: "temurin"
          java-version: "17"

      - name: "download"
        run: curl -o wss-unified-agent.jar https://unified-agent.s3.amazonaws.com/wss-unified-agent.jar

      - name: "scan"
        run: java -jar wss-unified-agent.jar
        env:
          WS_APIKEY: ${{ secrets.MEND_API_KEY }}
          WS_WSS_URL: https://saas-eu.whitesourcesoftware.com/agent
          WS_USERKEY: ${{ secrets.MEND_TOKEN }}
          WS_PRODUCTNAME: "DevX"
          WS_PROJECTNAME: ${{  github.event.repository.name }}