mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-17 05:00:27 +00:00
Code Activity
kyverno/.github/workflows/nancy.yaml

20 lines
458 B
YAML
Raw Normal View History

Integrate Sonarcloud and Nancy github action (#3491) * Integrate Sonarcloud and Nancy github action Integrate Sonarcloud for static code analysis and Nancy for analysing dependencies Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com> * fix: pin actions to commit sha Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> * fix auth for pr Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com> Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com> Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com> Co-authored-by: Jim Bugwadia <jim@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Co-authored-by: shuting <shuting@nirmata.com>
2022-09-14 12:55:14 +05:30
name: Nancy
on:
push:
branches:
- 'main'
- 'release*'
jobs:
nancy:
runs-on: ubuntu-latest
name: Nancy
steps:
- name: Checkout
chore(deps): bump actions/checkout from 2.4.0 to 3.1.0 (#5564) Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.1.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2.4.0...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-05 09:43:16 +01:00
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # pin@v2
Integrate Sonarcloud and Nancy github action (#3491) * Integrate Sonarcloud and Nancy github action Integrate Sonarcloud for static code analysis and Nancy for analysing dependencies Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com> * fix: pin actions to commit sha Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> * fix auth for pr Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com> Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com> Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com> Co-authored-by: Jim Bugwadia <jim@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Co-authored-by: shuting <shuting@nirmata.com>
2022-09-14 12:55:14 +05:30
- name: WriteGoList
run: go list -json -m all > go.list
- name: Nancy SAST Scan
uses: sonatype-nexus-community/nancy-github-action@aae196481b961d446f4bff9012e4e3b63d7921a4 # pin@main
Copy permalink