Fix #3; GitHub Actions + templates #10

	name: "nuget package reference check"

	on:
	push:
	pull_request:
	schedule:
	- cron: '0 8 * * *'

	jobs:
	build:
	runs-on: windows-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	# We must fetch at least the immediate parents so that if this is
	# a pull request then we can checkout the head.
	fetch-depth: 2

	- name: Setup MSBuild
	uses: microsoft/[email protected]

	- name: Setup NuGet
	uses: NuGet/[email protected]

	- name: add DevExpress nuget feed
	run: dotnet nuget add source https://nuget.devexpress.com/api -n DXFeed -u DevExpress -p ${{ secrets.DEVEXPRESS_NUGET_KEY }} --store-password-in-clear-text

	- name: Restore dependencies
	run: nuget restore ea-modelkit.sln

	- name: Build
	run: msbuild -property:Configuration=CICD -property:platform="Any CPU" CICD /p:RestorePackages=false

	- name: Checking NuGet vulnerabilites
	run: \|
	set -e
	dotnet list EA-ModelKit.sln package --outdated --include-transitive

	dotnet list EA-ModelKit.sln package --deprecated --include-transitive

	dotnet list EA-ModelKit.sln package --vulnerable --include-transitive 2>&1 \| tee vulnerabilities.log

	echo "Analyze dotnet list package command log output..."
	if grep -q -i "\bcritical\b\\|\bhigh\b\\|\bmoderate\b\\|\blow\b" vulnerabilities.log; then
	echo "Security Vulnerabilities found"
	exit 1
	else
	echo "No Security Vulnerabilities found"
	exit 0
	fi

Provide feedback