blob: c49090c0ea27df26753e1bd3bcc7366e812b928e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
---
name: Android - Audit dependencies
on:
pull_request:
paths: [.github/workflows/android-audit.yml, android/gradle/verification-metadata.xml]
schedule:
# At 06:20 UTC every day.
# Notifications for scheduled workflows are sent to the user who last modified the cron
# syntax in the workflow file. If you update this you must have notifications for
# Github Actions enabled, so these don't go unnoticed.
# https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/notifications-for-workflow-runs
- cron: '20 6 * * *'
workflow_dispatch:
jobs:
owasp-dependency-check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Run gradle audit task
run: |-
cd android
./gradlew dependencyCheckAnalyze
|
