security.yml

name: Security Scan

on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

jobs:
  build:

    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v2
    - name: Set up JDK 11
      uses: actions/setup-java@v2
      with:
        distribution: adopt
        java-version: 11

    - name: Dependency check
      run: sbt test:compile updateClassifiers

# Dependency check is broken now
#     - name: Dependency check
#       run: sbt dependencyCheck test:compile updateClassifiers
#
#     - name: Xanitizer Security Analysis
#       uses: RIGS-IT/xanitizer-action@v1
#       with:
#         license: ${{ secrets.XANITIZER_LICENSE }}
#         configFile: .github/workflows/baker.XanitizerConfig

    - uses: actions/upload-artifact@v2
      with:
        name: Xanitizer-Reports
        path: |
          *-Findings-List.pdf
          *-Findings-List.sarif