RL Scan with rl-scanner-composite action #120

	name: RL Scan with rl-scanner-composite action

	on:
	workflow_dispatch:

	permissions:
	statuses: write
	pull-requests: write
	security-events: write

	env:
	REPORT_DIR: "RLreport"

	jobs:
	Build-And-Scan:
	runs-on: ubuntu-latest

	steps:
	- name: Check out
	uses: actions/[email protected]

	- name: Set Current Date Time
	run: \|
	echo "DT_NOW=$(date +%Y%m%d-%H%M%S)" >> ${GITHUB_ENV}

	- name: Set up Java
	uses: actions/[email protected]
	with:
	distribution: 'zulu'
	java-version: '17'
	cache: 'maven'

	- name: Build
	run: \|
	mvn -B clean package

	- name: RL scan
	continue-on-error: true # Set to false if you want the overall run to fail when the scan detects policy violations
	id: scan

	env:
	RLSECURE_ENCODED_LICENSE: ${{ secrets.RL_LIC_KEY }}
	RLSECURE_SITE_KEY: ${{ secrets.RL_SITE_KEY }}

	uses: reversinglabs/[email protected]
	with:
	artifact-to-scan: 'target/struts2-showcase.war'
	report-path: ${{ env.REPORT_DIR }}
	rl-verbose: true

Provide feedback