Skip to content

Commit 92b1fdb

Browse files
committed
Enhance CI workflow by adding JDK 17 and Android SDK setup, and updating Snyk configuration for vulnerability scanning.
1 parent 2caa9b2 commit 92b1fdb

File tree

1 file changed

+21
-4
lines changed

1 file changed

+21
-4
lines changed

.github/workflows/sca-scan.yml

Lines changed: 21 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,19 @@ jobs:
77
runs-on: ubuntu-latest
88
steps:
99
- uses: actions/checkout@master
10+
11+
- name: Set up JDK 17
12+
uses: actions/setup-java@v4
13+
with:
14+
distribution: 'temurin'
15+
java-version: '17'
16+
cache: 'gradle'
17+
18+
- name: Set up Android SDK
19+
uses: android-actions/setup-android@v3
20+
with:
21+
packages: 'tools platform-tools platforms;android-34 build-tools;34.0.0'
22+
1023
- name: Setup local.properties
1124
run: |
1225
cat << EOF >> local.properties
@@ -18,12 +31,16 @@ jobs:
1831
contentType="${{ secrets.CONTENT_TYPE }}"
1932
assetUid="${{ secrets.ASSET_UID }}"
2033
EOF
21-
- name: Run Snyk to check for vulnerabilities
34+
35+
- name: Set up Snyk
2236
uses: snyk/actions/setup@master
37+
with:
38+
snyk-version: latest
39+
40+
- name: Run Snyk
2341
env:
2442
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
25-
with:
26-
args: --fail-on=all --all-sub-projects
27-
json: true
43+
run: snyk test --fail-on=all --all-sub-projects --json > snyk.json
2844
continue-on-error: true
45+
2946
- uses: contentstack/sca-policy@main

0 commit comments

Comments
 (0)