use correct runner for dependency check and bind plugin run to mavens…

… "validate" phase
cryptomator · Dec 13, 2023 · 069d5a4 · 069d5a4
1 parent 37715d3
commit 069d5a4
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
@@ -11,7 +11,7 @@ on:
 jobs:
   check-dependencies:
     name: Check dependencies
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     steps:
       - uses: actions/checkout@v4
         with:
@@ -25,7 +25,7 @@ jobs:
       - name: Run org.owasp:dependency-check plugin
         id: dependency-check
         continue-on-error: true
-        run: mvn -B verify -Pdependency-check -DskipTests
+        run: mvn -B validate -Pdependency-check
         env:
           NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
       - name: Upload report on failure

diff --git a/pom.xml b/pom.xml
@@ -292,6 +292,7 @@
 								<goals>
 									<goal>check</goal>
 								</goals>
+								<phase>validate</phase>
 							</execution>
 						</executions>
 					</plugin>