Add GitHub Security Actions Workflow #12
ci-main-pull-request-stub.yml
on: pull_request
call-ci-main-pr-check-pipeline
/
Checkout repository
5s
Echo stub version
3s
call-ci-main-pr-check-pipeline
/
Pre-compilation checks
4s
call-ci-main-pr-check-pipeline
/
Generate a simple slug based on repo and date for use in any output artifacts
2s
call-ci-main-pr-check-pipeline
/
Build and compilation
4s
call-ci-main-pr-check-pipeline
/
...
/
Complexity and SLOC generation
28s
call-ci-main-pr-check-pipeline
/
Language-specific pre-compilation steps and linting
call-ci-main-pr-check-pipeline
/
Language-agnostic pre-compilation steps
call-ci-main-pr-check-pipeline
/
...
/
Trufflehog
12s
call-ci-main-pr-check-pipeline
/
...
/
Trivy dependency vulnerability scan
15s
call-ci-main-pr-check-pipeline
/
BlackDuck-Polaris-SAST
27s
call-ci-main-pr-check-pipeline
/
Creating packaged binaries
call-ci-main-pr-check-pipeline
/
...
/
Export SBOM from GitHub Dependency Graph API
10s
call-ci-main-pr-check-pipeline
/
...
/
Generate SBOM using Blackduck Tool (BLUE)
59s
call-ci-main-pr-check-pipeline
/
...
/
Generate MSFT SBOM
call-ci-main-pr-check-pipeline
/
...
/
license_scout
call-ci-main-pr-check-pipeline
/
Detect SBOM version for application
call-ci-main-pr-check-pipeline
/
...
/
SonarQube
2m 41s
call-ci-main-pr-check-pipeline
/
PRIVATE Sonar scan (inline)
call-ci-main-pr-check-pipeline
/
...
/
Checkout code
call-ci-main-pr-check-pipeline
/
...
/
SonarQube
call-ci-main-pr-check-pipeline
/
...
/
build
call-ci-main-pr-check-pipeline
/
...
/
unit-tests
Matrix: call-ci-main-pr-check-pipeline / Unit tests
call-ci-main-pr-check-pipeline
/
Creating Habitat packages
call-ci-main-pr-check-pipeline
/
...
/
irfan
call-ci-main-pr-check-pipeline
/
Publishing packages
Annotations
1 error
|
call-ci-main-pr-check-pipeline / Generating SBOM / Generate SBOM using Blackduck Tool (BLUE)
Workflow failed! Exit Code: 8 The config option bridge.break has been set to true
|