From 57a4746e3eb4b0510b348f32f649e1772df8a1dd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ak=C4=B1n=20Demir?= <128565483+GrimezSec@users.noreply.github.com> Date: Thu, 4 Apr 2024 15:32:21 +0300 Subject: [PATCH] Update DevSecOps.yml --- .github/workflows/DevSecOps.yml | 25 ++++++++++++++++++------- 1 file changed, 18 insertions(+), 7 deletions(-) diff --git a/.github/workflows/DevSecOps.yml b/.github/workflows/DevSecOps.yml index 7c22ff2..aeee6bf 100644 --- a/.github/workflows/DevSecOps.yml +++ b/.github/workflows/DevSecOps.yml @@ -19,12 +19,7 @@ jobs: - name: Install Protoc uses: arduino/setup-protoc@v2 - - - name: Set up Nodejs - uses: actions/setup-node@v3 - with: - node-version: 20 - + - name: Checkout Source id: checkout uses: actions/checkout@v3 @@ -50,7 +45,23 @@ jobs: with: name: gosec-results path: results.sarif - + + - name: Depcheck + uses: dependency-check/Dependency-Check_Action@main + id: Depcheck + with: + project: 'test' + path: '.' + format: 'HTML' + out: 'reports' + args: > + --enableRetired + - name: Upload Test results + uses: actions/upload-artifact@master + with: + name: Depcheck report + path: ${{github.workspace}}/reports + - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v3 with: