From 868caf60701edc4ef01adcc01eef0a7f2960f545 Mon Sep 17 00:00:00 2001 From: Kulbhushan Date: Wed, 11 Jan 2023 18:00:04 +0530 Subject: [PATCH 1/4] Create build.yml --- .github/workflows/build.yml | 38 +++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .github/workflows/build.yml diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml new file mode 100644 index 00000000..7f0759eb --- /dev/null +++ b/.github/workflows/build.yml @@ -0,0 +1,38 @@ +name: Build + +on: + push: + branches: + - master + + +jobs: + build: + name: Build + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + with: + fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis + - name: Set up JDK 11 + uses: actions/setup-java@v1 + with: + java-version: 11 + - name: Cache SonarQube packages + uses: actions/cache@v1 + with: + path: ~/.sonar/cache + key: ${{ runner.os }}-sonar + restore-keys: ${{ runner.os }}-sonar + - name: Cache Maven packages + uses: actions/cache@v1 + with: + path: ~/.m2 + key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} + restore-keys: ${{ runner.os }}-m2 + - name: Build and analyze + env: + GITHUB_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }} # Needed to get PR information, if any + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} + run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=kmayer10_javaee8-samples_AYWgx5hKsVzFs6YvT2QL From 8a73df533240076107625c797836cdd5c45cee6d Mon Sep 17 00:00:00 2001 From: Kulbhushan Date: Wed, 11 Jan 2023 18:08:36 +0530 Subject: [PATCH 2/4] Update pom.xml --- pom.xml | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/pom.xml b/pom.xml index b80d1c24..fb6f3ad5 100644 --- a/pom.xml +++ b/pom.xml @@ -235,7 +235,7 @@ org.owasp dependency-check-maven - 4.0.0 + 7.4.4 maven-plugin @@ -253,15 +253,10 @@ - org.owasp + org. + dependency-check-maven - 4.0.0 - - http://internal-mirror.mycorp.com/downloads/nist/nvdcve-Modified.xml.gz - http://internal-mirror.mycorp.com/downloads/nist/nvdcve-2.0-Modified.xml.gz - http://internal-mirror.mycorp.com/downloads/nist/nvdcve-%d.xml - http://internal-mirror.mycorp.com/downloads/nist/nvdcve-2.0-%d.xml - + 7.4.4 From 964f1c956d74f8181b149fb71924f03052695ffb Mon Sep 17 00:00:00 2001 From: Kulbhushan Date: Wed, 11 Jan 2023 18:13:15 +0530 Subject: [PATCH 3/4] updated --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index fb6f3ad5..19d07539 100644 --- a/pom.xml +++ b/pom.xml @@ -36,7 +36,7 @@ central Central Repository - https://repo.maven.apache.org/maven2 + https://repo1.maven.org/maven2/ true From cde24890cf3174c3d17be118b0afde3eaa5c23b7 Mon Sep 17 00:00:00 2001 From: Kulbhushan Date: Wed, 11 Jan 2023 18:16:14 +0530 Subject: [PATCH 4/4] updated --- pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index 19d07539..dbf7ff34 100644 --- a/pom.xml +++ b/pom.xml @@ -235,7 +235,7 @@ org.owasp dependency-check-maven - 7.4.4 + 4.0.0 maven-plugin @@ -256,7 +256,7 @@ org. dependency-check-maven - 7.4.4 + 4.0.0