From c7798605fe80f369bf6fa2dc4d0c521e73e9a8b3 Mon Sep 17 00:00:00 2001 From: christosservos <132352106+christosservos@users.noreply.github.com> Date: Mon, 5 Feb 2024 12:14:25 +0200 Subject: [PATCH] Create depcheck_CONTAINER.yml --- .github/workflows/depcheck_CONTAINER.yml | 36 ++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 .github/workflows/depcheck_CONTAINER.yml diff --git a/.github/workflows/depcheck_CONTAINER.yml b/.github/workflows/depcheck_CONTAINER.yml new file mode 100644 index 000000000..88376a955 --- /dev/null +++ b/.github/workflows/depcheck_CONTAINER.yml @@ -0,0 +1,36 @@ +name: SCA - Depcheck - Container +on: + push: + workflow_dispatch: + +jobs: + Dependency_check: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + with: + fetch-depth: 0 + - uses: actions/cache@v3 + with: + path: | + ./dependency-check/data + # Ensure the key is unique and based on something that changes when the cache should be rebuilt + key: ${{ runner.os }}-dependency-check-${{ hashFiles('*.db', '*.json') }} + restore-keys: | + ${{ runner.os }}-dependency-check- + - name: Depcheck - Container + run: | + docker run --name DC --volume ${{ github.workspace }}:/usr/share/dependency-check/data owasp/dependency-check --scan '.' --out "/project/build/reports" + # docker create --name GL --entrypoint /bin/bash --interactive --volume ${{ github.workspace }}:/src zricethezav/gitleaks + # docker start GL + # docker exec GL git config --global --add safe.directory '/src' + # docker exec GL + + - name: Upload results - SCA + uses: actions/upload-artifact@master + with: + name: Depcheck report + path: ${{github.workspace}}/reports + + - run: ls -la