Skip to content

Commit

Permalink
[improve][ci] Skip "OWASP dependency check" in Pulsar CI if OWASP dep…
Browse files Browse the repository at this point in the history
… check data isn't cached
  • Loading branch information
lhotari committed Feb 12, 2025
1 parent 1ab6345 commit b372dea
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion .github/workflows/pulsar-ci.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1494,15 +1494,21 @@ jobs:
restore-keys: |
owasp-dependency-check-data-
- name: Log warning when skipped
if: ${{ !steps.restore-owasp-dependency-check-data.outputs.cache-matched-key }}
run: |
echo "::warning::OWASP Dependency Check was skipped since the OWASP Dependency check data wasn't found in the cache. Run ci-owasp-dependency-check.yaml workflow to update the cache."
# Projects dependent on flume, hdfs, and hbase currently excluded from the scan.
- name: trigger dependency check
if: ${{ steps.restore-owasp-dependency-check-data.outputs.cache-matched-key }}
run: |
mvn -B -ntp verify -PskipDocker,skip-all,owasp-dependency-check -Dcheckstyle.skip=true -DskipTests \
-pl '!distribution/server,!distribution/io,!distribution/offloaders,!tiered-storage/file-system,!pulsar-io/flume,!pulsar-io/hbase,!pulsar-io/hdfs3,!pulsar-io/docs,!pulsar-io/jdbc/openmldb'
- name: Upload report
uses: actions/upload-artifact@v4
if: ${{ cancelled() || failure() }}
if: ${{ steps.restore-owasp-dependency-check-data.outputs.cache-matched-key && (cancelled() || failure()) }}
continue-on-error: true
with:
name: dependency report
Expand Down

0 comments on commit b372dea

Please sign in to comment.