diff --git a/.github/workflows/osv-scanner-scan.yml b/.github/workflows/osv-scanner-scan.yml index e51dd907..6695b989 100644 --- a/.github/workflows/osv-scanner-scan.yml +++ b/.github/workflows/osv-scanner-scan.yml @@ -6,6 +6,8 @@ name: OSV-Scanner Scan on: schedule: - cron: "12 12 * * 1" + pull_request: + branches: [ main ] # Restrict jobs in this workflow to have no permissions by default; permissions # should be granted per job as needed using a dedicated `permissions` block @@ -17,7 +19,7 @@ jobs: actions: read contents: read # to fetch code (actions/checkout) security-events: write # for uploading SARIF files - if: ${{ github.repository == 'metal3-io/ip-address-manager' && github.event_name == 'schedule' }} + ### Condition temporarily removed for testing runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 @@ -28,16 +30,11 @@ jobs: uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 with: go-version: ${{ steps.vars.outputs.go_version }} + - name: Install OSV Scanner + run: go install github.com/google/osv-scanner/cmd/osv-scanner@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1 - name: Run OSV Scanner - uses: google/osv-scanner/actions/scanner@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1 - with: - scan-args: |- - --output=results.json - --format=json - -r - --skip-git - ./ - - name: "Run osv-scanner-reporter" + run: osv-scanner --format json --output results.json -r --skip-git ./ + - name: "Run OSV Scanner Reporter" uses: google/osv-scanner/actions/reporter@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1 with: scan-args: |-