Skip to content

deps(deps-dev): bump org.mockito:mockito-core from 4.8.1 to 5.20.0 #42

deps(deps-dev): bump org.mockito:mockito-core from 4.8.1 to 5.20.0

deps(deps-dev): bump org.mockito:mockito-core from 4.8.1 to 5.20.0 #42

name: 🔒 PR Security Check
on:
pull_request:
branches: [ main, develop ]
jobs:
# Quick security scan for PRs
security-scan:
name: 🔍 Security Scan
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up Java
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'
- name: Run Maven Security Check
run: |
# Check for known vulnerabilities in dependencies
mvn org.owasp:dependency-check-maven:check
continue-on-error: true
- name: Upload security report
uses: actions/upload-artifact@v4
if: always()
with:
name: security-report
path: target/
- name: Comment PR with results
uses: actions/github-script@v7
with:
script: |
const fs = require('fs');
const path = require('path');
try {
const reportPath = path.join(process.env.GITHUB_WORKSPACE, 'target');
if (fs.existsSync(reportPath)) {
const files = fs.readdirSync(reportPath);
const htmlFile = files.find(f => f.includes('dependency-check-report') && f.endsWith('.html'));
if (htmlFile) {
github.rest.issues.createComment({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
body: `🔒 **Security Scan Complete**\n\nDependency vulnerability scan completed for this PR. [View full report](https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId})`
});
}
}
} catch (error) {
console.log('Could not create comment:', error.message);
}