owasp

Author: WingZer0o

.github/workflows/owasp-dependency-check-dotnet.yml

@@ -2,101 +2,26 @@ name: OWASP Dependency Check (.NET)
 
 on:
   workflow_dispatch:
-  schedule:
-    - cron: "0 9 * * 1"
   push:
     branches: [ main ]
-    paths:
-      - "cas-dotnet-sdk/**"
-      - "cas-dotnet-sdk-tests/**"
-      - "*.sln"
-      - "**/*.csproj"
-      - "**/*.props"
-      - "**/*.targets"
-      - "**/packages.config"
   pull_request:
     branches: [ main ]
-    paths:
-      - "cas-dotnet-sdk/**"
-      - "cas-dotnet-sdk-tests/**"
-      - "*.sln"
-      - "**/*.csproj"
-      - "**/*.props"
-      - "**/*.targets"
-      - "**/packages.config"
-
-permissions:
-  contents: read
-  security-events: write
 
 jobs:
   dependency-check:
     name: Scan dependencies
     runs-on: ubuntu-latest
-    env:
-      DOTNET_NOLOGO: true
 
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          submodules: recursive
-
-      - name: Setup .NET SDKs
-        uses: actions/setup-dotnet@v4
-        with:
-          dotnet-version: |
-            6.0.x
-            7.0.x
-            8.0.x
-            9.0.x
-            10.0.x
-
-      - name: Restore solution
-        run: dotnet restore cas-dotnet-sdk.sln
-
-      - name: Prepare Dependency-Check data directory
-        run: mkdir -p .dependency-check-data
-
-      - name: Cache Dependency-Check data
-        uses: actions/cache@v4
-        with:
-          path: .dependency-check-data
-          key: dependency-check-data-${{ runner.os }}-${{ hashFiles('cas-dotnet-sdk/**/*.csproj', 'cas-dotnet-sdk-tests/**/*.csproj') }}
-          restore-keys: |
-            dependency-check-data-${{ runner.os }}-
-
-      - name: Run OWASP Dependency-Check (Docker)
-        env:
-          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
-        run: |
-          set -euo pipefail
-          mkdir -p dependency-check-report
-          docker run --rm \
-            -e NVD_API_KEY="${NVD_API_KEY:-}" \
-            -v "${{ github.workspace }}:/src" \
-            -v "${{ github.workspace }}/.dependency-check-data:/usr/share/dependency-check/data" \
-            -v "${{ github.workspace }}/dependency-check-report:/report" \
-            owasp/dependency-check:latest \
-            --project "cas-dotnet-sdk" \
-            --scan /src/cas-dotnet-sdk \
-            --scan /src/cas-dotnet-sdk-tests \
-            --format "HTML" \
-            --format "JSON" \
-            --format "SARIF" \
-            --out /report \
-            --failOnCVSS 7 \
-            ${NVD_API_KEY:+--nvdApiKey "${NVD_API_KEY}"}
-
-      - name: Upload OWASP dependency report
-        uses: actions/upload-artifact@v4
-        with:
-          name: dependency-check-report
-          path: dependency-check-report
-          retention-days: 7
-
-      - name: Upload SARIF to code scanning
-        if: success() && hashFiles('dependency-check-report/*.sarif') != ''
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: dependency-check-report/dependency-check-report.sarif
+    - name: Install Dependency-Check
+      run: |
+             wget https://github.com/jeremylong/DependencyCheck/releases/latest/download/dependency-check.zip
+             unzip dependency-check.zip
+
+    - name: Run scan
+      run: |
+        ./dependency-check/bin/dependency-check.sh \
+          --project "cas-dotnet-sdk" \
+          --scan . \
+          --format "HTML" \
+          --out reports