Skip to content

Commit

Permalink
Added github action maven-dependency-submission-action so that depend…
Browse files Browse the repository at this point in the history
…abot can monitor maven dependencies for vulnerabilities.
  • Loading branch information
Kevin Wheeler committed Aug 2, 2023
1 parent e69b8ec commit 4e43045
Showing 1 changed file with 38 additions and 0 deletions.
38 changes: 38 additions & 0 deletions .github/workflows/dependabot-maven-support.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
#name: Check Dependencies
#
#on:
# schedule:
# - cron: '0 0 * * *' # This will run the workflow every day at midnight
#
#jobs:
# check:
# runs-on: ubuntu-20.04
#
# steps:
# - name: Checkout code
# uses: actions/checkout@v2
#
# - name: Set up JDK 11
# uses: actions/setup-java@v2
# with:
# java-version: '11'
# distribution: 'adopt'
#
# - name: Maven Dependency Tree Dependency Submission
# uses: advanced-security/[email protected]

# Dependabot needs the maven dependencies sent to it using this Github action
# so that dependabot can interpret them or something.
name: Submit Dependency Snapshot
on:
push:
branches: [ main ]

jobs:
build:
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v3

- name: Submit Dependency Snapshot
uses: advanced-security/maven-dependency-submission-action@v3

0 comments on commit 4e43045

Please sign in to comment.