Skip to content
CI - MAIN

Add workflows for main, prs to main and scan with blackduck and sonar… #2

Sign in to view logs

Add workflows for main, prs to main and scan with blackduck and sonar…

Add workflows for main, prs to main and scan with blackduck and sonar… #2

Workflow file for this run

.github/workflows/main.yml at 9592c2a
name: CI - MAIN
env:
MAVEN_VERSION: '3.9.12'
on:
workflow_dispatch:
push:
branches: [main]
jobs:
blackduck:
name: Blackduck Scan
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Scan With Black Duck
uses: ./.github/actions/scan-with-blackduck
with:
blackduck_token: ${{ secrets.BLACK_DUCK_TOKEN }}
github_token: ${{ secrets.GITHUB_TOKEN }}
maven-version: ${{ env.MAVEN_VERSION }}
scan_mode: RAPID
build-and-test:

Check failure on line 28 in .github/workflows/main.yml

View workflow run for this annotation

GitHub Actions / CI - MAIN

Invalid workflow file 

The workflow is not valid. .github/workflows/main.yml (Line: 28, Col: 3): Error calling workflow 'cap-java/cds-feature-ai/.github/workflows/pipeline.yml@9592c2a52c5adf1009b582b7a129ab2a2f3bebc6'. The nested job 'codeql' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
uses: ./.github/workflows/pipeline.yml
with:
deploy-snapshot: true
secrets: inherit