diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 39c858e..17b33ca 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -1,11 +1,6 @@ # This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven -# This workflow uses actions that are not certified by GitHub. -# They are provided by a third-party and are governed by -# separate terms of service, privacy policy, and support -# documentation. - name: Java CI with Maven on: @@ -14,6 +9,9 @@ on: pull_request: branches: [ "main" ] +permissions: + contents: write # required for dependency submission + jobs: build: runs-on: ubuntu-latest @@ -30,8 +28,10 @@ jobs: - name: Build with Maven run: mvn -B -f SimpleAPI/pom.xml package + # Only run dependency graph submission on push (not pull_request) - name: Submit Dependency Snapshot + if: github.event_name == 'push' uses: advanced-security/maven-dependency-submission-action@v5 with: - directory: SimpleAPI # <-- tell the action where pom.xml is + directory: SimpleAPI # path to pom.xml # optional: maven-args: "-DskipTests" diff --git a/SimpleAPI/pom.xml b/SimpleAPI/pom.xml index 96cb133..7bd3f70 100644 --- a/SimpleAPI/pom.xml +++ b/SimpleAPI/pom.xml @@ -217,7 +217,7 @@ redis.clients jedis - 6.2.0 + 7.0.0