@@ -48,30 +48,30 @@ jobs:
|
|||||||
# node -v
|
# node -v
|
||||||
|
|
||||||
# ---------------- JAVA (Gradle + SonarScanner need JDK on Ubuntu) ----------------
|
# ---------------- JAVA (Gradle + SonarScanner need JDK on Ubuntu) ----------------
|
||||||
- name: Setup Java
|
# - name: Setup Java
|
||||||
uses: actions/setup-java@v4
|
# uses: actions/setup-java@v4
|
||||||
with:
|
# with:
|
||||||
distribution: temurin
|
# distribution: temurin
|
||||||
java-version: 17
|
# java-version: 17
|
||||||
cache: gradle
|
# cache: gradle
|
||||||
|
|
||||||
# ---------------- NODE ----------------
|
# ---------------- NODE ----------------
|
||||||
- name: Setup Node
|
# - name: Setup Node
|
||||||
uses: actions/setup-node@v4
|
# uses: actions/setup-node@v4
|
||||||
with:
|
# with:
|
||||||
node-version: 20
|
# node-version: 20
|
||||||
cache: npm
|
# cache: npm
|
||||||
|
|
||||||
- name: Install dependencies
|
- name: Install dependencies
|
||||||
run: npm ci
|
run: npm ci
|
||||||
|
|
||||||
# ---------------- TRIVY (filesystem scan; avoid trivy-action — it pulls actions/cache node24) ----------------
|
# ---------------- TRIVY (filesystem scan; avoid trivy-action — it pulls actions/cache node24) ----------------
|
||||||
- name: Install Trivy
|
# - name: Install Trivy
|
||||||
run: |
|
# run: |
|
||||||
mkdir -p "${HOME}/bin"
|
# mkdir -p "${HOME}/bin"
|
||||||
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b "${HOME}/bin" v0.70.0
|
# curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b "${HOME}/bin" v0.70.0
|
||||||
echo "${HOME}/bin" >> "${GITHUB_PATH}"
|
# echo "${HOME}/bin" >> "${GITHUB_PATH}"
|
||||||
"${HOME}/bin/trivy" --version
|
# "${HOME}/bin/trivy" --version
|
||||||
|
|
||||||
# Use "${HOME}/bin/trivy" — act/Gitea may not prepend GITHUB_PATH before the next step.
|
# Use "${HOME}/bin/trivy" — act/Gitea may not prepend GITHUB_PATH before the next step.
|
||||||
# Gitea only orchestrates the job; output path is on the runner. With ubuntu-latest:host this is the VM; with Docker jobs, mount /home/azureuser or use artifacts.
|
# Gitea only orchestrates the job; output path is on the runner. With ubuntu-latest:host this is the VM; with Docker jobs, mount /home/azureuser or use artifacts.
|
||||||
@@ -118,14 +118,14 @@ jobs:
|
|||||||
SONAR_HOST_URL: ${{ secrets.SONAR_URL }}
|
SONAR_HOST_URL: ${{ secrets.SONAR_URL }}
|
||||||
|
|
||||||
# ---------------- ANDROID SDK (required on Ubuntu: ANDROID_HOME / sdk.dir) ----------------
|
# ---------------- ANDROID SDK (required on Ubuntu: ANDROID_HOME / sdk.dir) ----------------
|
||||||
- name: Setup Android SDK
|
# - name: Setup Android SDK
|
||||||
uses: android-actions/setup-android@v3
|
# uses: android-actions/setup-android@v3
|
||||||
with:
|
# with:
|
||||||
packages: >-
|
# packages: >-
|
||||||
tools platform-tools
|
# tools platform-tools
|
||||||
platforms;android-36
|
# platforms;android-36
|
||||||
build-tools;36.0.0
|
# build-tools;36.0.0
|
||||||
ndk;27.1.12297006
|
# ndk;27.1.12297006
|
||||||
|
|
||||||
- name: Point Gradle to the SDK
|
- name: Point Gradle to the SDK
|
||||||
run: |
|
run: |
|
||||||
|
|||||||
Reference in New Issue
Block a user