From 15a2ff906c6dae72f4e0d1a931be18ad7bea455b Mon Sep 17 00:00:00 2001 From: Aditya Jaiswal <32607172+jaiswaladi246@users.noreply.github.com> Date: Sun, 28 Jul 2024 00:30:17 +0530 Subject: [PATCH] Update maven.yml --- .github/workflows/maven.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 95898020..bdcdc045 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -24,4 +24,14 @@ jobs: - name: Build with Maven run: mvn -B package --file pom.xml + - name: Trivy FS scan + run: | + trivy fs --format table -o fs.html . + + - name: SonarQube Scan + uses: sonarsource/sonarqube-scan-action@master + env: + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} +