#759 Create webhook

nashtech-garage · Aug 6, 2024 · d28bd5f · d28bd5f
1 parent d5a5fbc
commit d28bd5f
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/owasp-dependency-check-ci.yaml b/.github/workflows/owasp-dependency-check-ci.yaml
@@ -24,4 +24,9 @@ jobs:
             fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
         - uses: ./.github/workflows/actions
         - name: OWASP Dependency Check
-          run: mvn org.owasp:dependency-check-maven:check
+          run: mvn clean package org.owasp:dependency-check-maven:aggregate --file src/pom.xml -Dfmt.skip=true -DskipTests=true -fae -B -Dorg.slf4j.simpleLogger.defaultLogLevel=WARN -DfailBuildOnCVSS=7
+        - name: Upload scan results to GitHub Code Scanning
+          if: ${{ always() }}
+          uses: github/codeql-action/upload-sarif@v2
+          with:
+            sarif_file: target/dependency-check-report.sarif