Skip to content

Maven Dependency Check #17

Maven Dependency Check

Maven Dependency Check #17

---
name: Maven Dependency Check
on:
schedule:
- cron: '0 0 * * 0'
workflow_dispatch:
permissions: {}
env:
MAVEN_OPTS: >
-Dhttps.protocols=TLSv1.2
-Dmaven.repo.local=.m2/repository
-Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=WARN
-Dorg.slf4j.simpleLogger.showDateTime=true
-Djava.awt.headless=true
MAVEN_CLI_OPTS: >
--batch-mode
--errors
--fail-at-end
--show-version
-DinstallAtEnd=true
-DdeployAtEnd=true
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Set up JDK
uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
with:
distribution: temurin
java-version: 21
- name: Dependency Check with Maven
working-directory: xml
run: |
# shellcheck disable=SC2086
./mvnw ${MAVEN_CLI_OPTS} dependency-check:aggregate
- name: Upload artifacts
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
with:
name: ${{ github.workflow }}
path: xml/target/
- name: Clean up
working-directory: xml
run: rm "${HOME}/.m2/settings.xml"