build-native-vulnerability-analyzer.yml

# This file is part of Dependency-Track.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# SPDX-License-Identifier: Apache-2.0
# Copyright (c) OWASP Foundation. All Rights Reserved.
name: Build Native Vulnerability Analyzer

on:
  push:
    branches:
    - main
    - "feature-**"
    paths:
    - ".github/workflows/_build-native-meta.yml"
    - ".github/workflows/build-native-notification-publisher.yml"
    - "commons/**"
    - "commons-kstreams/**"
    - "commons-persistence/**"
    - "vulnerability-analyzer/**"
    - "pom.xml"
    - "proto/**"
  release:
    types:
    - released
  workflow_dispatch: { }

permissions: { }

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  call-build:
    uses: ./.github/workflows/_build-native-meta.yml
    with:
      module: vulnerability-analyzer
      ref-name: ${{ github.ref_name }}
    permissions:
      packages: write # Required to push images to ghcr.io