You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by fr...@apache.org on 2026/08/24 12:34:43 UTC
(druid) 01/01: ci: enable incremental dependency-check updates
This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch codex/dependency-check-incremental-cache
in repository https://gitbox.apache.org/repos/asf/druid.git
commit 255c0a218d9b4d75f38d7bc37462f640bd9e2f42
Author: Frank Chen <fr...@outlook.com>
AuthorDate: Mon Aug 24 20:34:23 2026 +0800
ci: enable incremental dependency-check updates
---
.github/workflows/cron-job-its.yml | 18 +++++++++++++++++-
1 file changed, 17 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/cron-job-its.yml b/.github/workflows/cron-job-its.yml
index 15c6f7634df..ba931dc5db4 100644
--- a/.github/workflows/cron-job-its.yml
+++ b/.github/workflows/cron-job-its.yml
@@ -17,6 +17,7 @@ name: "Cron Job ITs"
on:
schedule: # Runs by default on master branch
- cron: '0 3 * * *' # Runs every day at 3:00 AM UTC
+ workflow_dispatch:
pull_request:
paths:
- 'owasp-dependency-check-suppressions.xml'
@@ -45,6 +46,14 @@ jobs:
distribution: 'zulu'
cache: maven
+ - name: Restore Dependency-Check data
+ uses: actions/cache/restore@v4
+ with:
+ path: ~/.cache/dependency-check
+ key: dependency-check-data-${{ runner.os }}-${{ hashFiles('pom.xml') }}-${{ github.run_id }}
+ restore-keys: |
+ dependency-check-data-${{ runner.os }}-${{ hashFiles('pom.xml') }}-
+
- name: maven build # needed to rebuild in case of maven snapshot resolution fails
run: mvn clean install -P dist -P skip-static-checks,skip-tests -Dmaven.javadoc.skip=true -Dcyclonedx.skip=true -Dweb.console.skip=true
@@ -54,7 +63,7 @@ jobs:
OSS_INDEX_PASSWORD: ${{ secrets.OSS_INDEX_PASSWORD }}
NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
run: |
- mvn -B dependency-check:purge dependency-check:check -DnvdApiKey=$NVD_API_KEY -DossIndexUsername=$OSS_INDEX_USERNAME -DossIndexPassword=$OSS_INDEX_PASSWORD || { echo "
+ mvn -B dependency-check:check -DdataDirectory="$HOME/.cache/dependency-check" -DnvdValidForHours=24 -DnvdApiKey="$NVD_API_KEY" -DossIndexUsername="$OSS_INDEX_USERNAME" -DossIndexPassword="$OSS_INDEX_PASSWORD" || { echo "
The OWASP dependency check has found security vulnerabilities. Please use a newer version
of the dependency that does not have vulnerabilities. To see a report run
`mvn dependency-check:check`
@@ -62,3 +71,10 @@ jobs:
they can be suppressed by adding entries to owasp-dependency-check-suppressions.xml (for more
information, see https://jeremylong.github.io/DependencyCheck/general/suppression.html).
" && false; }
+
+ - name: Save Dependency-Check data
+ if: always()
+ uses: actions/cache/save@v4
+ with:
+ path: ~/.cache/dependency-check
+ key: dependency-check-data-${{ runner.os }}-${{ hashFiles('pom.xml') }}-${{ github.run_id }}
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org