diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 40661eb..2a0c786 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -32,20 +32,6 @@ jobs: - name: Run linters run: bin/clojure -M:clj-kondo --lint src test - - name: Install NVD clojure - run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd; - - - name: Check NVD Secret is configured - env: - NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }} - if: ${{ env.NVD_API_TOKEN == '' }} - run: echo "NVD_API_TOKEN secret is empty"; exit 1 - - - name: Check NVD - env: - NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }} - run: echo "bin/clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :classpath \""$(bin/clojure -Spath)\"" - create_release: if: startsWith(github.ref, 'refs/tags/v0') || startsWith(github.ref, 'refs/tags/v1') runs-on: ubuntu-latest diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml new file mode 100644 index 0000000..be3af92 --- /dev/null +++ b/.github/workflows/deps.yml @@ -0,0 +1,33 @@ +name: Run dependency checks + +on: + push + +jobs: + checks: + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v4 + - uses: actions/cache@v4 + with: { path: "~/.m2", key: "${{ runner.os }}-${{ hashFiles('deps.edn') }}-m2" } + - uses: actions/cache@v4 + with: + key: "clojure-${{ runner.os }}-${{ hashFiles('.github/workflows/install-binaries.sh') }}" + path: | + ./bin + ./lib + + - name: Install NVD clojure + run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd; + + - name: Check NVD Secret is configured + env: + NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }} + if: ${{ env.NVD_API_TOKEN == '' }} + run: echo "NVD_API_TOKEN secret is empty"; exit 1 + + - name: Check NVD + env: + NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }} + run: bin/clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :classpath "\"$(bin/clojure -Spath)\"" diff --git a/nvd-clojure.edn b/nvd-clojure.edn deleted file mode 100644 index 2763fd8..0000000 --- a/nvd-clojure.edn +++ /dev/null @@ -1 +0,0 @@ -{:suppression-file "nvd_suppressions.xml"}