diff --git a/.github/workflows/nuget-reference-check.yml b/.github/workflows/nuget-reference-check.yml index 1b47eddd..e51735a6 100644 --- a/.github/workflows/nuget-reference-check.yml +++ b/.github/workflows/nuget-reference-check.yml @@ -33,11 +33,12 @@ jobs: - name: Checking NuGet vulnerabilites run: | - dotnet list CDP4-SDK.sln package --outdated --include-transitive 2>&1 | tee build.log + set -e + dotnet list CDP4-SDK.sln package --outdated --include-transitive - dotnet list CDP4-SDK.sln package --deprecated --include-transitive 2>&1 | tee -a build.log + dotnet list CDP4-SDK.sln package --deprecated --include-transitive - dotnet list CDP4-SDK.sln package --vulnerable --include-transitive 2>&1 | tee -a build.log + dotnet list CDP4-SDK.sln package --vulnerable --include-transitive 2>&1 | tee vulnerabilities.log echo "Analyze dotnet list package command log output..." grep -q -i "\bcritical\b\|\bhigh\b\|\bmoderate\b\|\blow\b" build.log;