Skip to content

Bump actions/dependency-review-action from 4.3.4 to 4.5.0 #805

Bump actions/dependency-review-action from 4.3.4 to 4.5.0

Bump actions/dependency-review-action from 4.3.4 to 4.5.0 #805

name: Code Analysis
on:
push:
paths:
- .github/**/*.yml
- scripts/**
- starterkit_app/**
branches:
- main
pull_request:
paths:
- .github/**/*.yml
- scripts/**
- starterkit_app/**
types: [opened, synchronize, reopened]
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
env:
PROJECT_WORKING_DIRECTORY: "starterkit_app"
permissions: {}
jobs:
run-code-analysis:
runs-on: ubuntu-latest
permissions: {}
steps:
- name: Harden Runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
egress-policy: audit
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Install Flutter
uses: ./.github/workflows/steps/install-flutter
with:
working_directory: ${{ env.PROJECT_WORKING_DIRECTORY }}
- name: Check formatting
run: dart format --line-length=120 --set-exit-if-changed .
working-directory: ${{ env.PROJECT_WORKING_DIRECTORY }}
- name: Check for duplicate lines of code
run: |
npm install -g jscpd
npx jscpd lib --reporters consoleFull --threshold 5
working-directory: ${{ env.PROJECT_WORKING_DIRECTORY }}
- name: Run code generation
uses: ./.github/workflows/steps/run-pub-get-and-code-generation
with:
generate_intl: "true"
working_directory: ${{ env.PROJECT_WORKING_DIRECTORY }}
- name: Run Dart code analysis
run: |
dart analyze .
working-directory: ${{ env.PROJECT_WORKING_DIRECTORY }}