build: add timeouts

tomjo · Mar 20, 2024 · a1b71f9 · a1b71f9
1 parent 6174376
commit a1b71f9
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -44,6 +44,7 @@ env:
 jobs:
   build:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0

diff --git a/.github/workflows/determine_version.yaml b/.github/workflows/determine_version.yaml
@@ -9,6 +9,7 @@ on:
 jobs:
   determine_version:
     runs-on: ubuntu-22.04
+    timeout-minutes: 5
     steps:
       - name: Checkout
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0

diff --git a/.github/workflows/owasp.yaml b/.github/workflows/owasp.yaml
@@ -21,6 +21,7 @@ permissions:
 jobs:
   build:
     runs-on: ubuntu-22.04
+    timeout-minutes: 15
     steps:
       - name: Checkout
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
@@ -42,12 +43,14 @@ jobs:
       - name: OWASP dependency check
         env:
           ORG_GRADLE_PROJECT_projectVersion: ${{ inputs.version }}
+          ORG_GRADLE_PROJECT_nvdApiKey: ${{ secrets.NVD_API_KEY }}
+          GRADLE_OPTS: -Xmx8g
         run: ./gradlew dependencyCheckAggregate
       - name: Upload build reports
         if: always()
         uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
-          name: build-reports
-          path: build/reports/
-      - name: Perform dependency review
-        uses: actions/dependency-review-action@6c5ccdad469c9f8a2996bfecaec55a631a347034 # v3.1.0
+          name: owasp-reports
+          path: |
+            build/reports/
+            !build/reports/configuration-cache