Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[fix][ci] Fix OWASP dep check GH actions workflow #21831

Merged
merged 13 commits into from
Jan 2, 2024
Merged

[fix][ci] Fix OWASP dep check GH actions workflow #21831

Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
038d8d7
[fix][ci] Fix OWASP dep check GH actions workflow
lhotari Jan 2, 2024
207f71d
Run check for offloaders/tiered-storage and pulsar-io connectors
lhotari Jan 2, 2024
813d0f7
add "--fail-at-end" to scan all
lhotari Jan 2, 2024
5dc7faa
Add caching for OWASP dependency check data
lhotari Jan 2, 2024
229b1dd
Don't fail checks for pulsar-io modules
lhotari Jan 2, 2024
73a6e2c
Use cache that caches up to one week
lhotari Jan 2, 2024
da29ecd
Run jobs one-by-one so that cache is properly leveraged
lhotari Jan 2, 2024
be0a171
Use actions/upload-artifact@v4
lhotari Jan 2, 2024
d76c813
Use same cache in pulsar-ci.yaml
lhotari Jan 2, 2024
da8515e
Increase timeout
lhotari Jan 2, 2024
be6356e
Restore previous key as basis
lhotari Jan 2, 2024
53d1735
Update condition to update cache
lhotari Jan 2, 2024
f8596d7
Update cache if previous step was successful
lhotari Jan 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci-owasp-dependency-check.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@ jobs:

- name: run OWASP Dependency Check for distribution/offloaders and distribution/io
run: mvn -B -ntp -Pmain,skip-all,skipDocker,owasp-dependency-check initialize verify -pl distribution/offloaders,distribution/io
if: !cancelled()
if: ${{ !cancelled() }}

- name: Upload OWASP Dependency Check reports
uses: actions/upload-artifact@v3
Expand Down
Loading