1515jobs :
1616
1717 build-analyze :
18-
1918 runs-on : ubuntu-latest
2019
2120 env :
22- version : 1.3 .${{ github.run_number }}
21+ version : 2.0 .${{ github.run_number }}
2322
2423 steps :
25- - uses : actions/checkout@v3
24+ - uses : actions/checkout@v4
2625
27- - name : Set up JDK 11
28- uses : actions/setup-java@v3
26+ - name : Set up JDK 17
27+ uses : actions/setup-java@v4
2928 with :
30- java-version : ' 11 '
29+ java-version : ' 17 '
3130 distribution : ' corretto'
3231 cache : maven
3332
3433 - name : Initialize CodeQL
35- uses : github/codeql-action/init@v2
34+ uses : github/codeql-action/init@v3
3635 with :
3736 languages : ' java'
3837
3938 - name : Build
4039 run : mvn -V -B clean package org.jacoco:jacoco-maven-plugin:0.8.7:prepare-agent org.jacoco:jacoco-maven-plugin:0.8.7:report -Pcoverage -Dproject.version=${{ env.version }}-SNAPSHOT
4140
4241 - name : Upload Build Artifact
43- uses : actions/upload-artifact@v3
42+ uses : actions/upload-artifact@v4
4443 with :
4544 name : KeepTime-${{ env.version }}
4645 path : /home/runner/work/KeepTime/KeepTime/target/*-bin.zip
@@ -49,29 +48,41 @@ jobs:
4948 env :
5049 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
5150 SONAR_TOKEN : ${{ secrets.SONAR_TOKEN }}
52- run : mvn -V -B sonar:sonar
53- -Dsonar.host.url=${{ secrets.HOST_URL }}
54- -Dsonar.organization=${{ secrets.ORGANIZATION_NAME }}
55- -Dsonar.projectKey=${{ secrets.PROJECT_KEY }}
56- -Dsonar.java.binaries=.
57- -Dsonar.qualitygate.wait=false
51+ run : mvn -V -B sonar:sonar -Dsonar.host.url=${{ secrets.HOST_URL }} -Dsonar.organization=${{ secrets.ORGANIZATION_NAME }} -Dsonar.projectKey=${{ secrets.PROJECT_KEY }} -Dsonar.java.binaries=. -Dsonar.qualitygate.wait=false
5852
5953 - name : Perform CodeQL Analysis
60- uses : github/codeql-action/analyze@v2
54+ uses : github/codeql-action/analyze@v3
6155
6256 dependency-check :
63-
64- runs-on : ubuntu-latest
65-
66- steps :
67- - uses : actions/checkout@v3
68-
69- - name : Set up JDK 11
70- uses : actions/setup-java@v3
71- with :
72- java-version : ' 11'
73- distribution : ' corretto'
74- cache : maven
75-
76- - name : dependencyCheck
77- run : mvn dependency-check:check
57+ runs-on : ubuntu-latest
58+ steps :
59+ - name : Checkout
60+ uses : actions/checkout@v4
61+ - name : Set up JDK 17
62+ uses : actions/setup-java@v4
63+ with :
64+ java-version : ' 17'
65+ distribution : ' corretto'
66+ cache : maven
67+ - name : Build
68+ run : mvn -V -B clean package
69+ - name : Depcheck
70+ uses : dependency-check/Dependency-Check_Action@main
71+ id : Depcheck
72+ env :
73+ # actions/setup-java@v1 changes JAVA_HOME so it needs to be reset to match the depcheck image
74+ JAVA_HOME : /opt/jdk
75+ with :
76+ project : ' KeepTime'
77+ path : ' .'
78+ format : ' HTML'
79+ out : ' reports' # this is the default, no need to specify unless you wish to override it
80+ args : >
81+ --failOnCVSS 8.9
82+ --enableRetired
83+ - name : Upload Test results
84+ if : always()
85+ uses : actions/upload-artifact@v4
86+ with :
87+ name : Depcheck report
88+ path : ${{github.workspace}}/reports
0 commit comments