Skip to content

Bump keycloak.version from 25.0.5 to 26.0.5 #53

Bump keycloak.version from 25.0.5 to 26.0.5

Bump keycloak.version from 25.0.5 to 26.0.5 #53

name: Build for development
on:
push:
branches: [ 'feature/**' ]
pull_request:
branches: [ develop, main ]
types: [ opened, ready_for_review ]
pull_request_target:
branches: [ develop, main ]
types: [ closed ]
workflow_dispatch:
jobs:
scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up JDK 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'
cache: 'maven'
- name: Run verify
run: mvn verify
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
ignore-unfixed: true
format: 'sarif'
output: 'trivy-results.sarif'
severity: 'CRITICAL,HIGH'
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: 'trivy-results.sarif'