missing artifact-run-id for trunk workflow for semgrep

dotCMS · Nov 11, 2024 · b00a1ca · b00a1ca
1 parent 4a3241d
commit b00a1ca
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/cicd_3-trunk.yml b/.github/workflows/cicd_3-trunk.yml
@@ -97,6 +97,8 @@ jobs:
     needs: [ initialize, test ]
     if: always() && !failure() && !cancelled() && vars.DISABLE_SEMGREP != 'true'
     uses: ./.github/workflows/cicd_comp_semgrep-phase.yml
+    with:
+      artifact-run-id: ${{ needs.initialize.outputs.artifact-run-id }}
     secrets:
       SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
 

diff --git a/.github/workflows/cicd_comp_semgrep-phase.yml b/.github/workflows/cicd_comp_semgrep-phase.yml
@@ -33,14 +33,16 @@ jobs:
         with:
           fetch-depth: 0
 
-      # Prepare Maven environment and run SonarQube analysis
+      # Create dependency files for semgrep analysis
       - name: Build Dependency Tre
         uses: ./.github/actions/core-cicd/maven-job
         with:
           stage-name: "Dependency Tree Scan"
           artifacts-from: ${{ inputs.artifact-run-id }}
           require-main: true
           github-token: ${{ secrets.GITHUB_TOKEN }}
+          require-graalvm: false
+          requires-node: false
           maven-args: dependency:tree -DoutputFile=maven_dep_tree.txt
       - name: Create Zip File
         run: find . -type f -name 'maven_dep_tree.txt' -exec zip -r dependency-tree.zip {} +