Skip to content

add cron job

add cron job #7

Workflow file for this run

name: Baselining Tests
on:
push:
branches:
- master
pull_request:
branches:
- master
paths-ignore:
- 'README.md'
env:
NVD_API_TOKEN: ${{ secrets.NVD_API_KEY }} # Token to access NVD API for dependency-check
jobs:
test:
name: Run Tests
runs-on: ubuntu-latest
container: openjdk:17-jdk-slim
steps:
- uses: actions/checkout@v3
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: test
run: ./gradlew test
dependency-scan:
name: Dependency Scan
runs-on: ubuntu-latest
container: openjdk:17-jdk-slim
steps:
- uses: actions/checkout@v3
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: build
run: ./gradlew assemble
# the action has not been updated a while, but it always uses the latest plugin version
- name: Run DependencyCheck plugin
uses: dependency-check/Dependency-Check_Action@main
id: depcheck
continue-on-error: true # we still want to upload the report
with:
project: ${{ github.repository }}
path: '.'
format: 'HTML'
out: 'reports'
args: >
--failOnCVSS 6
--disableAssembly
--nvdApiKey ${{ secrets.NVD_API_KEY }}
--nvdApiDelay 10000
- name: Upload test results
uses: actions/upload-artifact@v3
with:
name: dependency-check-report-baselining
path: ${{ github.workspace }}/reports
# if DependencyCheck failed, the job should also fail, but only after the results were uploaded
- name: Validate DependencyCheck outcome
if: ${{ steps.depcheck.outcome == 'failure' }}
run: |
echo "DependencyCheck failed"
exit 1