Merge pull request #125 from Workiva/non_dockerfile_cyclonedex_2

SBOM from GHA - again
Workiva · Mar 26, 2024 · 8936f35 · 8936f35
2 parents fcd059d + ecfad2f
commit 8936f35
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 40 deletions.
diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
diff --git a/.github/workflows/tests.yaml → .github/workflows/ci.yaml b/.github/workflows/tests.yaml → .github/workflows/ci.yaml
@@ -1,13 +1,42 @@
 name: Tests
 
 on:
+  pull_request:
   push:
     branches:
       - master
-  pull_request:
 
+permissions:
+  pull-requests: write
+  contents: write
+  id-token: write
 
 jobs:
+  checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: dart-lang/setup-dart@v1
+        with:
+          sdk: 2.19.6
+
+      - run: dart pub get
+
+      - name: Analyze
+        run: dart run dart_dev analyze
+
+      - name: Format
+        run: dart run dart_dev format --check
+
+      - name: Validate Dependencies
+        run: dart run dependency_validator
+
+      - name: Generate SBOM
+        uses: anchore/sbom-action@v0
+        with:
+          path: ./
+          format: cyclonedx-json
+
   snapshots:
     runs-on: ubuntu-latest
     steps:

diff --git a/Dockerfile b/Dockerfile