-
Notifications
You must be signed in to change notification settings - Fork 22
43 lines (40 loc) · 1.13 KB
/
dependency-check.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
name: Automated update of known-issue suppression
on:
pull_request:
branches:
- master
schedule:
# At 12 midnight, 7am and 5pm
- cron: "0 0,7,17 * * *"
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-node@v2
with:
node-version: 12
cache: 'yarn'
- run: yarn install --frozen-lockfile
audit:
needs: build
runs-on: ubuntu-latest
steps:
- uses: tibdex/github-app-token@v1
id: generate-token
with:
app_id: ${{ secrets.HMCTS_GITHUB_EXUI_APP_ID }}
private_key: ${{ secrets.HMCTS_GITHUB_EXUI_PRIVATE_KEY }}
- uses: actions/checkout@v3
with:
token: ${{ steps.generate-token.outputs.token }}
ref: master
- name: Run automated update of known-issue suppression
run: yarn update-audit-known-issues
- name: Commit
uses: stefanzweifel/git-auto-commit-action@v4
with:
skip_dirty_check: false
commit_message: "Automated update of known-issue suppression"
branch: master