Skip to content

Bump actions/dependency-review-action from 2.5.1 to 3.1.5 #6

Bump actions/dependency-review-action from 2.5.1 to 3.1.5

Bump actions/dependency-review-action from 2.5.1 to 3.1.5 #6

Workflow file for this run

name: "Pull Request"
"on":
pull_request:
paths-ignore:
- '*.md'
- 'images/**'
permissions:
contents: read
packages: write
jobs:
#
# --- Builds: Earthly ---
#
## Gradle: Earthly
build-earthly-gradle:
name: "Build (Gradle)"
uses: ./.github/workflows/gradle.earthly.yml
strategy:
fail-fast: false
matrix:
java: [17, 21]
secrets: inherit
with:
runner: ubuntu-latest
java: ${{ matrix.java }}
## Gradle: Earthly
build-earthly-maven:
name: "Build (Maven)"
uses: ./.github/workflows/maven.earthly.yml
strategy:
fail-fast: false
matrix:
java: [17, 21]
secrets: inherit
with:
runner: ubuntu-latest
java: ${{ matrix.java }}
#
# --- Builds: Batect ---
#
# coming soon.
#
# --- Checks ---
#
## Scan code with CodeQL.
checks-codeql:

Check failure on line 55 in .github/workflows/on.pr.yml

View workflow run for this annotation

GitHub Actions / Pull Request

Invalid workflow file

The workflow is not valid. .github/workflows/on.pr.yml (Line: 55, Col: 3): Error calling workflow 'sgammon/modern-java-practices/.github/workflows/checks.codeql.yml@df65fb6ee09e19de9507ec1fe1f697872ca56aff'. The nested job 'analyze' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
name: "Checks"
uses: ./.github/workflows/checks.codeql.yml
## Scan dependencies for vulnerabilities.
checks-deps-review:
name: "Checks"
uses: ./.github/workflows/checks.dependency-review.yml