Create depcheck_CONTAINER.yml

.github/workflows/depcheck_CONTAINER.yml

@@ -0,0 +1,36 @@
+name: SCA - Depcheck - Container
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  Dependency_check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/cache@v3
+        with:
+          path: |
+            ./dependency-check/data
+        # Ensure the key is unique and based on something that changes when the cache should be rebuilt
+          key: ${{ runner.os }}-dependency-check-${{ hashFiles('*.db', '*.json') }}
+          restore-keys: |
+             ${{ runner.os }}-dependency-check-
+      - name: Depcheck - Container
+        run: |
+          docker run --name DC --volume ${{ github.workspace }}:/usr/share/dependency-check/data owasp/dependency-check --scan '.' --out "/project/build/reports"
+        #    docker create --name GL --entrypoint /bin/bash --interactive --volume ${{ github.workspace }}:/src zricethezav/gitleaks 
+        #    docker start GL
+        #    docker exec GL git config --global --add safe.directory '/src'
+        #    docker exec GL 
+
+      - name: Upload results - SCA
+        uses: actions/upload-artifact@master
+        with:
+           name: Depcheck report
+           path: ${{github.workspace}}/reports
+
+      - run: ls -la