Skip to content

Commit 9f24864

Browse files
authored
Update gradle.yml
1 parent 361fde4 commit 9f24864

File tree

1 file changed

+16
-25
lines changed

1 file changed

+16
-25
lines changed

.github/workflows/gradle.yml

Lines changed: 16 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -4,32 +4,23 @@ on:
44
pull_request:
55
branches: [ "main" ]
66

7+
permissions:
8+
contents: read
9+
security-events: write
10+
711
jobs:
12+
# JOB 1: The Scanner (Note: No "steps" here, just "uses")
813
osv-scan:
9-
name: Scan for New Vulnerabilities
10-
runs-on: ubuntu-latest
11-
12-
permissions:
13-
contents: read
14-
security-events: write # Required to upload results to GitHub Security tab
14+
uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.1
15+
with:
16+
# Optional: Scan arguments
17+
scan-args: |-
18+
--recursive
1519
20+
# JOB 2: (Optional) Your other steps run in a separate job
21+
build-application:
22+
runs-on: ubuntu-latest
1623
steps:
17-
- name: Checkout code
18-
uses: actions/checkout@v4
19-
with:
20-
fetch-depth: 0 # Important: Fetch full history for diff comparison
21-
22-
- name: Run OSV-Scanner
23-
uses: google/osv-scanner-action@v2.3.1
24-
with:
25-
scan-args: |-
26-
--recursive
27-
--format=sarif
28-
--output=results.sarif
29-
fail-on-vuln: true
30-
31-
- name: Upload SARIF results
32-
uses: github/codeql-action/upload-sarif@v3
33-
if: always() # Upload results even if the scan fails
34-
with:
35-
sarif_file: results.sarif
24+
- uses: actions/checkout@v4
25+
- name: Build
26+
run: ./gradlew build

0 commit comments

Comments
 (0)