Skip to content

Commit

Permalink
[Add] nuget-reference-check
Browse files Browse the repository at this point in the history
  • Loading branch information
samatstariongroup committed Oct 19, 2024
1 parent 2982532 commit 02db2fe
Showing 1 changed file with 47 additions and 0 deletions.
47 changes: 47 additions & 0 deletions .github/workflows/nuget-reference-check.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
name: "nuget package reference check"

on:
push:
pull_request:
schedule:
- cron: '0 8 * * *'

jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
fetch-depth: 2

- name: Setup .NET Environment
uses: actions/setup-dotnet@v4
with:
dotnet-version: 8.0.x

- name: Install dependencies
run: dotnet restore EcoreNetto.sln

- name: Build
run: dotnet build EcoreNetto.sln --no-restore /p:ContinuousIntegrationBuild=true

- name: Checking NuGet vulnerabilites
run: |
set -e
dotnet list EcoreNetto.sln package --outdated --include-transitive
dotnet list EcoreNetto.sln package --deprecated --include-transitive
dotnet list EcoreNetto.sln package --vulnerable --include-transitive 2>&1 | tee vulnerabilities.log
echo "Analyze dotnet list package command log output..."
if grep -q -i "\bcritical\b\|\bhigh\b\|\bmoderate\b\|\blow\b" vulnerabilities.log; then
echo "Security Vulnerabilities found"
exit 1
else
echo "No Security Vulnerabilities found"
exit 0
fi

0 comments on commit 02db2fe

Please sign in to comment.