Dependabot configuration to update actions in workflow #175
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 'FOSSA Action' | |
| # Ensures that this is only run once, either when pushing | |
| # directly to main OR when pushing to a PR against main. | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| fossa-scan: | |
| strategy: | |
| fail-fast: false | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| - name: Use Node.js 20.x | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 20.x | |
| - name: Install npm packages | |
| run: yarn --frozen-lockfile | |
| - name: Build | |
| run: yarn build | |
| - name: Run FOSSA scan in debug mode and upload build data | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| debug: true | |
| - name: Upload FOSSA debug bundle as a build artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: fossa.debug.json.gz | |
| path: ./fossa.debug.json.gz | |
| - name: Run FOSSA container scan and upload build data | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| container: alpine:latest | |
| - name: Run FOSSA scan with branch | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| branch: develop | |
| project: custom-test-project | |
| - name: Run FOSSA test with a --project and --branch | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| branch: develop | |
| project: custom-test-project | |
| - name: Run FOSSA test | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| run-tests: true | |
| - name: Run FOSSA test with --diff | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| run-tests: ${{ github.event_name == 'pull_request' }} | |
| test-diff-revision: ${{ github.event.pull_request.base.sha }} | |
| - name: Run FOSSA test with container | |
| uses: ./ | |
| with: | |
| api-key: ${{secrets.fossaApiKey}} | |
| container: alpine:latest | |
| run-tests: true |