You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by lh...@apache.org on 2022/04/12 06:09:29 UTC
[pulsar] branch master updated: [fix][ci] Owasp check: do not use 'install verify' to avoid build failures (#15119)
This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 4bee19242e1 [fix][ci] Owasp check: do not use 'install verify' to avoid build failures (#15119)
4bee19242e1 is described below
commit 4bee19242e155eb37a19d21fdca145ea9aaf6a4c
Author: Nicolò Boschi <bo...@gmail.com>
AuthorDate: Tue Apr 12 08:09:17 2022 +0200
[fix][ci] Owasp check: do not use 'install verify' to avoid build failures (#15119)
---
.github/workflows/ci-owasp-dep-check.yaml | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/ci-owasp-dep-check.yaml b/.github/workflows/ci-owasp-dep-check.yaml
index a6ab4ff0ee8..71eed1b3a12 100644
--- a/.github/workflows/ci-owasp-dep-check.yaml
+++ b/.github/workflows/ci-owasp-dep-check.yaml
@@ -57,6 +57,7 @@ jobs:
- '**/pom.xml'
- 'src/owasp-dependency-check-false-positives.xml'
- 'src/owasp-dependency-check-suppressions.xml'
+ - '.github/workflows/ci-owasp-dep-check.yaml'
- name: Cache local Maven repository
if: ${{ steps.changes.outputs.poms == 'true' }}
@@ -87,9 +88,9 @@ jobs:
df -h
# Projects dependent on flume, hdfs, hbase, and presto currently excluded from the scan.
- - name: run "clean install verify" to trigger dependency check
+ - name: run "clean verify" to trigger dependency check
if: ${{ steps.changes.outputs.poms == 'true' }}
- run: mvn -q -B -ntp clean install verify -PskipDocker,owasp-dependency-check -DskipTests -pl '!pulsar-sql,!distribution/io,!distribution/offloaders,!tiered-storage/file-system,!pulsar-io/flume,!pulsar-io/hbase,!pulsar-io/hdfs2,!pulsar-io/hdfs3,!pulsar-io/docs'
+ run: mvn -q -B -ntp clean verify -PskipDocker,owasp-dependency-check -DskipTests -pl '!pulsar-sql,!distribution/io,!distribution/offloaders,!tiered-storage/file-system,!pulsar-io/flume,!pulsar-io/hbase,!pulsar-io/hdfs2,!pulsar-io/hdfs3,!pulsar-io/docs'
- name: Upload report
uses: actions/upload-artifact@v2