check.yaml

name: Run dependency and spotbugs checks

on:
  workflow_run:
    workflows: ["Run tests"]
    types:
      - completed
  workflow_dispatch:

permissions:
    contents: read

jobs:
    run-checks:
      name: Run dependency and spotbugs checks
      runs-on: ubuntu-latest

      steps:
      - uses: actions/checkout@v4

      - name: Setup java
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'temurin'
          cache: maven

      - name: Run dependency check
        run: |
          ./mvnw -DossIndexUsername=${{ secrets.ossIndexUsername }} -DossIndexPassword=${{ secrets.ossIndexPassword }} -DnvdApiKey=${{ secrets.nvdApiKey }} org.owasp:dependency-check-maven:check

      - name: Archive dependency report
        uses: actions/upload-artifact@v4
        with:
          name: dependency-report
          path: target/dependency-check-report.html

      - name: Run spotbugs check
        run: |
          ./mvnw spotbugs:check