Skip to content

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.2 to 3.2.3 in the test-dependencies group #116

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.2 to 3.2.3 in the test-dependencies group

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.2 to 3.2.3 in the test-dependencies group #116

Workflow file for this run

name: code quality
on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
jobs:
qodana:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Qodana Scan
uses: JetBrains/qodana-action@v2023.3.2
- name: Upload Result to Github Code Scanning
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json
snyk:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run Snyk
uses: snyk/actions/maven@master
continue-on-error: true # To make sure that SARIF upload gets called
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: --sarif-file-output=snyk.sarif
- name: Upload Result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: snyk.sarif