1- name : Dependency Scan
1+ name : OWASP Dependency Scan
22
33on :
44 pull_request :
@@ -15,45 +15,48 @@ jobs:
1515 runs-on : ubuntu-latest
1616
1717 steps :
18- - uses : actions/checkout@v4
19-
20- - name : Set up Rust
21- uses : dtolnay/rust-toolchain@stable
22-
23- - name : Generate lockfile when missing
24- run : |
25- if [ ! -f Cargo.lock ]; then
26- cargo generate-lockfile
27- fi
28-
29- - name : Set up Node.js
30- uses : actions/setup-node@v4
31- with :
32- node-version : " 20"
33-
34- - name : Set up Python
35- uses : actions/setup-python@v5
36- with :
37- python-version : " 3.11"
38-
39- - name : Install OWASP scanning tools
40- run : |
41- npm install -g @cyclonedx/cdxgen
42- python -m pip install --upgrade pip
43- pip install owasp-depscan
44-
45- - name : Create reports directory
46- run : mkdir -p reports
47-
48- - name : Generate CycloneDX SBOM
49- run : cdxgen -t rust -o reports/sbom.json .
50-
51- - name : Run OWASP dep-scan
52- run : depscan --bom reports/sbom.json --reports-dir reports
53-
54- - name : Upload dependency scan reports
55- uses : actions/upload-artifact@v4
56- if : always()
57- with :
58- name : dependency-scan-reports
59- path : reports/
18+ - uses : actions/checkout@v4
19+
20+ - name : Set up Rust
21+ uses : dtolnay/rust-toolchain@stable
22+
23+ - name : Generate lockfile when missing
24+ run : |
25+ if [ ! -f Cargo.lock ]; then
26+ cargo generate-lockfile
27+ fi
28+
29+ - name : Build the project
30+ run : cargo build --release --verbose
31+
32+ - name : Set up Node.js
33+ uses : actions/setup-node@v4
34+ with :
35+ node-version : " 24"
36+
37+ - name : Set up Python
38+ uses : actions/setup-python@v5
39+ with :
40+ python-version : " 3.11"
41+
42+ - name : Install OWASP scanning tools
43+ run : |
44+ npm install -g @cyclonedx/cdxgen
45+ python -m pip install --upgrade pip
46+ pip install owasp-depscan
47+
48+ - name : Create reports directory
49+ run : mkdir -p reports
50+
51+ - name : Generate CycloneDX SBOM
52+ run : cdxgen -t rust -o reports/sbom.json .
53+
54+ - name : Run OWASP dep-scan
55+ run : depscan --bom reports/sbom.json --reports-dir reports
56+
57+ - name : Upload dependency scan reports
58+ uses : actions/upload-artifact@v4
59+ if : always()
60+ with :
61+ name : dependency-scan-reports
62+ path : reports/
0 commit comments