@@ -48,30 +48,30 @@ jobs:
|
||||
# node -v
|
||||
|
||||
# ---------------- JAVA (Gradle + SonarScanner need JDK on Ubuntu) ----------------
|
||||
- name: Setup Java
|
||||
uses: actions/setup-java@v4
|
||||
with:
|
||||
distribution: temurin
|
||||
java-version: 17
|
||||
cache: gradle
|
||||
# - name: Setup Java
|
||||
# uses: actions/setup-java@v4
|
||||
# with:
|
||||
# distribution: temurin
|
||||
# java-version: 17
|
||||
# cache: gradle
|
||||
|
||||
# ---------------- NODE ----------------
|
||||
- name: Setup Node
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: 20
|
||||
cache: npm
|
||||
# - name: Setup Node
|
||||
# uses: actions/setup-node@v4
|
||||
# with:
|
||||
# node-version: 20
|
||||
# cache: npm
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
# ---------------- TRIVY (filesystem scan; avoid trivy-action — it pulls actions/cache node24) ----------------
|
||||
- name: Install Trivy
|
||||
run: |
|
||||
mkdir -p "${HOME}/bin"
|
||||
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b "${HOME}/bin" v0.70.0
|
||||
echo "${HOME}/bin" >> "${GITHUB_PATH}"
|
||||
"${HOME}/bin/trivy" --version
|
||||
# - name: Install Trivy
|
||||
# run: |
|
||||
# mkdir -p "${HOME}/bin"
|
||||
# curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b "${HOME}/bin" v0.70.0
|
||||
# echo "${HOME}/bin" >> "${GITHUB_PATH}"
|
||||
# "${HOME}/bin/trivy" --version
|
||||
|
||||
# Use "${HOME}/bin/trivy" — act/Gitea may not prepend GITHUB_PATH before the next step.
|
||||
# Gitea only orchestrates the job; output path is on the runner. With ubuntu-latest:host this is the VM; with Docker jobs, mount /home/azureuser or use artifacts.
|
||||
@@ -118,14 +118,14 @@ jobs:
|
||||
SONAR_HOST_URL: ${{ secrets.SONAR_URL }}
|
||||
|
||||
# ---------------- ANDROID SDK (required on Ubuntu: ANDROID_HOME / sdk.dir) ----------------
|
||||
- name: Setup Android SDK
|
||||
uses: android-actions/setup-android@v3
|
||||
with:
|
||||
packages: >-
|
||||
tools platform-tools
|
||||
platforms;android-36
|
||||
build-tools;36.0.0
|
||||
ndk;27.1.12297006
|
||||
# - name: Setup Android SDK
|
||||
# uses: android-actions/setup-android@v3
|
||||
# with:
|
||||
# packages: >-
|
||||
# tools platform-tools
|
||||
# platforms;android-36
|
||||
# build-tools;36.0.0
|
||||
# ndk;27.1.12297006
|
||||
|
||||
- name: Point Gradle to the SDK
|
||||
run: |
|
||||
|
||||
Reference in New Issue
Block a user