Add GitHub Security Actions Workflow #2
ci-main-pull-request-checks.yml
on: pull_request
call-ci-main-pr-check-pipeline
/
Checkout repository
4s
Echo stub version
4s
call-ci-main-pr-check-pipeline
/
Pre-compilation checks
3s
call-ci-main-pr-check-pipeline
/
Build and compilation
2s
call-ci-main-pr-check-pipeline
/
...
/
Complexity and SLOC generation
19s
call-ci-main-pr-check-pipeline
/
Language-specific pre-compilation steps and linting
0s
call-ci-main-pr-check-pipeline
/
Language-agnostic pre-compilation steps
0s
call-ci-main-pr-check-pipeline
/
...
/
Trufflehog
11s
call-ci-main-pr-check-pipeline
/
polaris-sast
0s
call-ci-main-pr-check-pipeline
/
run-blackduck-sca
0s
call-ci-main-pr-check-pipeline
/
Creating packaged binaries
call-ci-main-pr-check-pipeline
/
...
/
Export SBOM from GitHub Dependency Graph API
7s
call-ci-main-pr-check-pipeline
/
...
/
Generate SBOM using Blackduck Tool
0s
call-ci-main-pr-check-pipeline
/
...
/
Generate MSFT SBOM
0s
call-ci-main-pr-check-pipeline
/
...
/
license_scout
0s
call-ci-main-pr-check-pipeline
/
...
/
Echo inputs
call-ci-main-pr-check-pipeline
/
...
/
SonarQube
call-ci-main-pr-check-pipeline
/
...
/
Echo inputs
call-ci-main-pr-check-pipeline
/
...
/
SonarQube
call-ci-main-pr-check-pipeline
/
...
/
Echo inputs
call-ci-main-pr-check-pipeline
/
...
/
SonarQube
Matrix: call-ci-main-pr-check-pipeline / Unit tests
call-ci-main-pr-check-pipeline
/
Creating Habitat packages
0s
call-ci-main-pr-check-pipeline
/
Publishing packages
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
habitat-sh-core-packages-20250825180955-GitHub-sbom.csv
Expired
|
303 Bytes |
sha256:e287435cd7c3bff6f41efcc7131f74ee11cf5c312a64846f79d285d6cd3db077
|
|
|
habitat-sh-core-packages-20250825180955-GitHub-sbom.json
Expired
|
756 Bytes |
sha256:39916943b27b3b6440db68beb73f96bccc622f21fb009905659ac18b2c214fa3
|
|
|
scc-output.txt
Expired
|
12.7 KB |
sha256:8cd7b8f89bcde08500763f9e83fe434a874412c4773e51ef25936ba9600a2462
|
|