summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorAlbin <albin@mullvad.net>2023-06-01 12:00:51 +0200
committerAlbin <albin@mullvad.net>2023-06-01 12:00:51 +0200
commit02f76a6e8bec0e94ac9218e4c159e360b529d963 (patch)
tree11875ab1670379e56a85588889691ac914e6409c
parent50ef4aa869771d89e3e12a15ffff9f131026223e (diff)
parentd91ec2ce5c5ccc942fe7e0f85d7aee362345bb04 (diff)
downloadmullvadvpn-02f76a6e8bec0e94ac9218e4c159e360b529d963.tar.xz
mullvadvpn-02f76a6e8bec0e94ac9218e4c159e360b529d963.zip
Merge branch 'trigger-audit-check-daily-and-on-lockfile-changes-droid-160'
-rw-r--r--.github/workflows/android-audit.yml12
1 files changed, 10 insertions, 2 deletions
diff --git a/.github/workflows/android-audit.yml b/.github/workflows/android-audit.yml
index 7c59e295c2..c49090c0ea 100644
--- a/.github/workflows/android-audit.yml
+++ b/.github/workflows/android-audit.yml
@@ -2,13 +2,21 @@
name: Android - Audit dependencies
on:
pull_request:
- paths: [.github/workflows/android-audit.yml, android/**]
+ paths: [.github/workflows/android-audit.yml, android/gradle/verification-metadata.xml]
+ schedule:
+ # At 06:20 UTC every day.
+ # Notifications for scheduled workflows are sent to the user who last modified the cron
+ # syntax in the workflow file. If you update this you must have notifications for
+ # Github Actions enabled, so these don't go unnoticed.
+ # https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/notifications-for-workflow-runs
+ - cron: '20 6 * * *'
workflow_dispatch:
jobs:
owasp-dependency-check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- - run: |-
+ - name: Run gradle audit task
+ run: |-
cd android
./gradlew dependencyCheckAnalyze