Skip to content

Commit e6252a0

Browse files
authored
testing owasp dc (#73)
1 parent a696b54 commit e6252a0

File tree

1 file changed

+46
-43
lines changed

1 file changed

+46
-43
lines changed
Lines changed: 46 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
name: Dependency Scan
1+
name: OWASP Dependency Scan
22

33
on:
44
pull_request:
@@ -15,45 +15,48 @@ jobs:
1515
runs-on: ubuntu-latest
1616

1717
steps:
18-
- uses: actions/checkout@v4
19-
20-
- name: Set up Rust
21-
uses: dtolnay/rust-toolchain@stable
22-
23-
- name: Generate lockfile when missing
24-
run: |
25-
if [ ! -f Cargo.lock ]; then
26-
cargo generate-lockfile
27-
fi
28-
29-
- name: Set up Node.js
30-
uses: actions/setup-node@v4
31-
with:
32-
node-version: "20"
33-
34-
- name: Set up Python
35-
uses: actions/setup-python@v5
36-
with:
37-
python-version: "3.11"
38-
39-
- name: Install OWASP scanning tools
40-
run: |
41-
npm install -g @cyclonedx/cdxgen
42-
python -m pip install --upgrade pip
43-
pip install owasp-depscan
44-
45-
- name: Create reports directory
46-
run: mkdir -p reports
47-
48-
- name: Generate CycloneDX SBOM
49-
run: cdxgen -t rust -o reports/sbom.json .
50-
51-
- name: Run OWASP dep-scan
52-
run: depscan --bom reports/sbom.json --reports-dir reports
53-
54-
- name: Upload dependency scan reports
55-
uses: actions/upload-artifact@v4
56-
if: always()
57-
with:
58-
name: dependency-scan-reports
59-
path: reports/
18+
- uses: actions/checkout@v4
19+
20+
- name: Set up Rust
21+
uses: dtolnay/rust-toolchain@stable
22+
23+
- name: Generate lockfile when missing
24+
run: |
25+
if [ ! -f Cargo.lock ]; then
26+
cargo generate-lockfile
27+
fi
28+
29+
- name: Build the project
30+
run: cargo build --release --verbose
31+
32+
- name: Set up Node.js
33+
uses: actions/setup-node@v4
34+
with:
35+
node-version: "24"
36+
37+
- name: Set up Python
38+
uses: actions/setup-python@v5
39+
with:
40+
python-version: "3.11"
41+
42+
- name: Install OWASP scanning tools
43+
run: |
44+
npm install -g @cyclonedx/cdxgen
45+
python -m pip install --upgrade pip
46+
pip install owasp-depscan
47+
48+
- name: Create reports directory
49+
run: mkdir -p reports
50+
51+
- name: Generate CycloneDX SBOM
52+
run: cdxgen -t rust -o reports/sbom.json .
53+
54+
- name: Run OWASP dep-scan
55+
run: depscan --bom reports/sbom.json --reports-dir reports
56+
57+
- name: Upload dependency scan reports
58+
uses: actions/upload-artifact@v4
59+
if: always()
60+
with:
61+
name: dependency-scan-reports
62+
path: reports/

0 commit comments

Comments
 (0)