chore(ci): improvements to gha workflows #22
sgammonon.pr.yml
on: pull_request
Matrix: Build / build
Checks
/
Gradle Wrapper Validate
12s
Checks
/
Dependency Graph
2m 36s
Matrix: Checks / CodeQL Analysis
Matrix: Tests / test
Build
/
Generate Docs
0s
Build
/
Publish Snapshot
0s
Annotations
8 errors, 4 warnings, and 3 notices
|
Checks / Dependency Graph
Dependency review detected vulnerable packages.
|
|
Tests / JDK 17 Android (windows-latest)
Resource not accessible by integration
|
|
Tests / JDK 17 JRE (ubuntu-latest)
Resource not accessible by integration
|
|
Tests / JDK 17 JRE (windows-latest)
Resource not accessible by integration
|
|
Tests / JDK 8 JRE (ubuntu-latest)
Resource not accessible by integration
|
|
Tests / JDK 8 Android (ubuntu-latest)
Resource not accessible by integration
|
|
Tests / JDK 11 Android (ubuntu-latest)
Resource not accessible by integration
|
|
Tests / JDK 11 JRE (ubuntu-latest)
Resource not accessible by integration
|
|
Build / SLSA Provenance / detect-env
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: slsa-framework/slsa-github-generator/.github/actions/[email protected]. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
Build / SLSA Provenance / generator
Restore cache failed: Dependencies file is not found in /home/runner/work/guava/guava. Supported file pattern: go.sum
|
|
Build / SLSA Provenance / generator
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9, ./__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check, actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753, ./__BUILDER_CHECKOUT_DIR__/.github/actions/compute-sha256, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
Checks / CodeQL Analysis (java)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
Checks / Dependency Graph
Submitting snapshot...
|
|
Checks / Dependency Graph
{
"manifests": {
"guava-parent": {
"resolved": {
"pkg:maven/com.google.guava/[email protected]?type=jar": {
"package_url": "pkg:maven/com.google.guava/[email protected]?type=jar",
"relationship": "direct",
"scope": "development",
"dependencies": []
},
"pkg:maven/com.google.guava/[email protected]?type=jar": {
"package_url": "pkg:maven/com.google.guava/[email protected]?type=jar",
"relationship": "direct",
"scope": "development",
"dependencies": []
},
"pkg:maven/com.google.code.findbugs/[email protected]?type=jar": {
"package_url": "pkg:maven/com.google.code.findbugs/[email protected]?type=jar",
"relationship": "direct",
"scope": "runtime",
"dependencies": []
},
"pkg:maven/org.checkerframework/[email protected]?type=jar": {
"package_url": "pkg:maven/org.checkerframework/[email protected]?type=jar",
"relationship": "direct",
"scope": "runtime",
"dependencies": []
},
"pkg:maven/com.google.errorprone/[email protected]?type=jar": {
"package_url": "pkg:maven/com.google.errorprone/[email protected]?type=jar",
"relationship": "direct",
"scope": "runtime",
"dependencies": []
},
"pkg:maven/com.google.j2objc/[email protected]?type=jar": {
"package_url": "pkg:maven/com.google.j2objc/[email protected]?type=jar",
"relationship": "direct",
"scope": "development",
"dependencies": []
},
"pkg:maven/jdk/srczip@999?type=jar": {
"package_url": "pkg:maven/jdk/srczip@999?type=jar",
"relationship": "direct",
"scope": "runtime",
"dependencies": []
},
"pkg:maven/com.google.guava/guava@HEAD-jre-SNAPSHOT?type=jar": {
"package_url": "pkg:maven/com.google.guava/guava@HEAD-jre-SNAPSHOT?type=jar",
"relationship": "direct",
"scope": "development",
"dependencies": [
"pkg:maven/com.google.guava/[email protected]?type=jar",
"pkg:maven/com.google.guava/[email protected]?type=jar",
"pkg:maven/com.google.code.findbugs/[email protected]?type=jar",
"pkg:maven/com.google.errorprone/[email protected]?type=jar",
"pkg:maven/com.google.j2objc/[email protected]?type=jar",
"pkg:maven/com.google.guava/[email protected]?type=jar",
"pkg:maven/com.google.guava/[email protected]?type=jar"
]
},
"pkg:maven/junit/[email protected]?type=jar": {
"package_url": "pkg:maven/junit/[email protected]?type=jar",
"relationship": "direct",
"scope": "development",
"dependencies": [
"pkg:maven/org.hamcrest/[email protected]?type=jar",
"pkg:maven/org.hamcrest/[email protected]?type=jar"
]
},
"pkg:maven/org.hamcrest/[email protected]?type=jar": {
"package_url": "pkg:maven/org.hamcrest/[email protected]?type=jar",
"relationship": "indirect",
"scope": "d
|
|
Checks / Dependency Graph
Snapshot successfully created at 2024-03-08T07:20:31.534Z
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
guava-artifacts-jre-a0097c46ba54d94795db572ac1ce32344d2b7f37
Expired
|
17.8 MB |
|
|
multiple.intoto.jsonl
Expired
|
40.5 KB |
|