Skip to content
.github/workflows/build-test-analyse.yml

[CU-86b8rd19x] Add PR validation pipeline with SCA, SAST, and secrets detection #2

Sign in to view logs

[CU-86b8rd19x] Add PR validation pipeline with SCA, SAST, and secrets detection

[CU-86b8rd19x] Add PR validation pipeline with SCA, SAST, and secrets detection #2

Workflow file for this run

.github/workflows/build-test-analyse.yml at a177039
name: Build, Test & Analyse
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
jobs:
build-and-test-java-app:
name: Build & Test Java App
uses: DNAstack/dnastack-development-tools/.github/workflows/build-test-java-app.yml@945ddc20e0baa715095f63b282d81da7df57dd0b

Check failure on line 12 in .github/workflows/build-test-analyse.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/build-test-analyse.yml

Invalid workflow file 

error parsing called workflow
".github/workflows/build-test-analyse.yml"
-> "DNAstack/dnastack-development-tools/.github/workflows/build-test-java-app.yml@945ddc20e0baa715095f63b282d81da7df57dd0b"
: workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
with:
java-version: 17
secrets:
pat-with-read-packages-permission: ${{ secrets.AUTH_TOKEN }}
sast:
name: SAST (SonarQube)
uses: DNAstack/dnastack-development-tools/.github/workflows/sast.yml@945ddc20e0baa715095f63b282d81da7df57dd0b
with:
with-frontend: false
java-version: 17
secrets:
pat-with-read-packages-permission: ${{ secrets.AUTH_TOKEN }}
sonar-token: ${{ secrets.SONAR_TOKEN }}
sonar-host-url: ${{ secrets.SONAR_HOST_URL }}
sca:
name: SCA (Trivy)
uses: DNAstack/dnastack-development-tools/.github/workflows/sca.yml@945ddc20e0baa715095f63b282d81da7df57dd0b
with:
java-version: 17
secrets:
pat-with-read-packages-permission: ${{ secrets.AUTH_TOKEN }}
secrets-detection:
name: Secrets Detection (Gitleaks)
uses: DNAstack/dnastack-development-tools/.github/workflows/secrets-detection.yml@945ddc20e0baa715095f63b282d81da7df57dd0b
secrets:
gitleaks-license: ${{ secrets.GITLEAKS_LICENSE }}