File tree Expand file tree Collapse file tree 1 file changed +16
-25
lines changed
Expand file tree Collapse file tree 1 file changed +16
-25
lines changed Original file line number Diff line number Diff line change 44 pull_request :
55 branches : [ "main" ]
66
7+ permissions :
8+ contents : read
9+ security-events : write
10+
711jobs :
12+ # JOB 1: The Scanner (Note: No "steps" here, just "uses")
813 osv-scan :
9- name : Scan for New Vulnerabilities
10- runs-on : ubuntu-latest
11-
12- permissions :
13- contents : read
14- security-events : write # Required to upload results to GitHub Security tab
14+ uses : google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.1
15+ with :
16+ # Optional: Scan arguments
17+ scan-args : |-
18+ --recursive
1519
20+ # JOB 2: (Optional) Your other steps run in a separate job
21+ build-application :
22+ runs-on : ubuntu-latest
1623 steps :
17- - name : Checkout code
18- uses : actions/checkout@v4
19- with :
20- fetch-depth : 0 # Important: Fetch full history for diff comparison
21-
22- - name : Run OSV-Scanner
23- uses : google/osv-scanner-action@v2.3.1
24- with :
25- scan-args : |-
26- --recursive
27- --format=sarif
28- --output=results.sarif
29- fail-on-vuln : true
30-
31- - name : Upload SARIF results
32- uses : github/codeql-action/upload-sarif@v3
33- if : always() # Upload results even if the scan fails
34- with :
35- sarif_file : results.sarif
24+ - uses : actions/checkout@v4
25+ - name : Build
26+ run : ./gradlew build
You can’t perform that action at this time.
0 commit comments