depcheck_CONTAINER.yml

name: SCA - Depcheck - Container
on:
  push:
  workflow_dispatch:

jobs:
  Dependency_check:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: actions/cache@v3
        with:
          path: |
            ~/.cache/dependency-check
        # Ensure the key is unique and based on something that changes when the cache should be rebuilt
          key: ${{ runner.os }}-dependency-check-${{ hashFiles('*.db', '*.json') }}
          restore-keys: |
             ${{ runner.os }}-dependency-check-
      - name: Depcheck - Container
        run: |
          docker run --name DC --volume ${{ github.workspace }}:/src --volume ~/.cache/dependency-check:/usr/share/dependency-check/data owasp/dependency-check --scan '/src' --out "/src/build/reports" --nvdApiKey ${{ secrets.NVD_API_KEY }}
        #    docker create --name GL --entrypoint /bin/bash --interactive --volume ${{ github.workspace }}:/src zricethezav/gitleaks 
        #    docker start GL
        #    docker exec GL git config --global --add safe.directory '/src'
        #    docker exec GL 
        env:
          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
      - name: Upload results - SCA
        uses: actions/upload-artifact@master
        with:
           name: Depcheck report
           path: ${{github.workspace}}/build/reports

      - run: ls -la