mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 17:37:12 +00:00
9d3400406d
* Use nancy on actually included dependencies Signed-off-by: Marcel Müller <marcel.mueller1@rwth-aachen.de> * Update nancy-ignore to only match true dependencies Signed-off-by: Marcel Müller <marcel.mueller1@rwth-aachen.de> --------- Signed-off-by: Marcel Müller <marcel.mueller1@rwth-aachen.de>
35 lines
848 B
YAML
35 lines
848 B
YAML
name: Nancy
|
|
|
|
permissions: {}
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- '*'
|
|
pull_request:
|
|
branches:
|
|
- 'main'
|
|
- 'release*'
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
nancy:
|
|
runs-on: ubuntu-latest
|
|
name: Nancy
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
|
|
- name: Setup caches
|
|
uses: ./.github/actions/setup-caches
|
|
timeout-minutes: 5
|
|
continue-on-error: true
|
|
- name: Setup build env
|
|
uses: ./.github/actions/setup-build-env
|
|
timeout-minutes: 10
|
|
- name: WriteGoList
|
|
run: go list -json -deps ./... > go.list
|
|
- name: Nancy SAST Scan
|
|
uses: sonatype-nexus-community/nancy-github-action@726e338312e68ecdd4b4195765f174d3b3ce1533 # v1.0.3
|