diff --git a/.gitea/workflows/cd-develop.yml b/.gitea/workflows/cd-develop.yml index 8188ebb..d043d5b 100644 --- a/.gitea/workflows/cd-develop.yml +++ b/.gitea/workflows/cd-develop.yml @@ -19,16 +19,8 @@ jobs: - name: Clean runner disk run: docker system prune -f 2>/dev/null || true - - name: Install Java 21 and Maven - run: | - apt-get update -qq - apt-get install -y -qq wget apt-transport-https gnupg - wget -qO - https://packages.adoptium.net/artifactory/api/gpg/key/public | gpg --dearmor -o /usr/share/keyrings/adoptium.gpg - echo "deb [signed-by=/usr/share/keyrings/adoptium.gpg] https://packages.adoptium.net/artifactory/deb $(. /etc/os-release && echo $VERSION_CODENAME) main" | tee /etc/apt/sources.list.d/adoptium.list - apt-get update -qq - apt-get install -y -qq temurin-21-jdk maven - java -version - mvn -version + - name: Verify toolchain + run: java -version && mvn -version && trivy --version - name: Configure Maven settings run: | @@ -73,15 +65,13 @@ jobs: - name: Build JAR run: mvn clean package -DskipTests -B - - name: Install Trivy - run: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin - - name: Trivy vulnerability scan run: | trivy fs \ --exit-code 1 \ --severity HIGH,CRITICAL \ --ignore-unfixed \ + --skip-db-update \ --scanners vuln \ --format table \ target/