From 9c32ad2ff6c599e06675625f4b59618da804844b Mon Sep 17 00:00:00 2001 From: Dmitry Salakhov Date: Tue, 9 Feb 2021 16:28:00 +1300 Subject: [PATCH] Clean up nancy run --- .github/workflows/quality-scan.yml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/.github/workflows/quality-scan.yml b/.github/workflows/quality-scan.yml index 2f54b31d3..1b3f4c05f 100644 --- a/.github/workflows/quality-scan.yml +++ b/.github/workflows/quality-scan.yml @@ -51,7 +51,7 @@ jobs: - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v1 server-security: - name: Server security check + name: Scan server code runs-on: ubuntu-latest env: GO111MODULE: on @@ -71,7 +71,7 @@ jobs: # Path to SARIF file relative to the root of the repository sarif_file: results.sarif server-dependencies: - name: Server dependency check + name: Scan server dependencies runs-on: ubuntu-latest env: GO111MODULE: on @@ -79,9 +79,7 @@ jobs: steps: - name: Checkout Source uses: actions/checkout@v2 - - name: Get Nancy binary + - name: Download Nancy binary run: curl -L "https://github.com/sonatype-nexus-community/nancy/releases/download/$NANCY_VERSION/nancy-$NANCY_VERSION-linux-amd64" -o nancy && chmod +x nancy - - name: ls - run: ls -al - name: Scan modules run: cd api && go list -json -m all | ../nancy sleuth