Skip to content

Add image for Debian Python 3.13, Debian dotnet 10 preview, Temurin java 24, php 8.3 #1884

Add image for Debian Python 3.13, Debian dotnet 10 preview, Temurin java 24, php 8.3

Add image for Debian Python 3.13, Debian dotnet 10 preview, Temurin java 24, php 8.3 #1884

name: Reachables tests
on:
pull_request:
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
cancel-in-progress: true
jobs:
java-js-sample-tests:
strategy:
fail-fast: false
matrix:
node-version: ['23.x']
os: ['ubuntu-24.04']
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- name: Set up JDK
uses: actions/setup-java@v4
with:
distribution: 'temurin'
java-version: '23'
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v4
with:
node-version: ${{ matrix.node-version }}
- name: npm install, build
run: |
npm install --global corepack@latest
corepack enable
corepack pnpm install --config.strict-dep-builds=true
mkdir -p repotests
mkdir -p bomresults
- uses: actions/checkout@v4
with:
repository: 'DependencyTrack/dependency-track'
path: 'repotests/dependency-track'
ref: '4.11.1'
- uses: actions/checkout@v4
with:
repository: 'DependencyTrack/frontend'
path: 'repotests/frontend'
ref: '4.13.0'
- name: compile
run: |
cd repotests/dependency-track
mvn -q clean compile -DskipTests -Dmaven.test.skip=true
- name: reachables tests - java
run: |
node bin/cdxgen.js -p -t java --profile research -o repotests/dependency-track/bom.json repotests/dependency-track
ls -ltr repotests/dependency-track/
cp -rf repotests/dependency-track/*.json bomresults/
env:
CDXGEN_DEBUG_MODE: verbose
- name: reachables tests - js
run: |
node bin/cdxgen.js -p -t js --profile research -o repotests/frontend/bom.json repotests/frontend
- uses: actions/upload-artifact@v4
with:
name: bomresults
path: bomresults
ruby-samples:
strategy:
fail-fast: false
matrix:
os: ["ubuntu-24.04"]
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- name: setup paths
run: |
mkdir -p repotests
mkdir -p rubyresults
- uses: actions/checkout@v4
with:
repository: 'campsite/campsite'
path: 'repotests/campsite'
ref: '10197238bbbefd9c9ac7c77467b647fd93993ba0'
- uses: actions/checkout@v4
with:
repository: 'bionomia/bionomia'
path: 'repotests/bionomia'
ref: '5ada8b5f4a5f68561a7195e2badc2f744dc4676e'
- uses: actions/checkout@v4
with:
repository: 'OWASP/railsgoat'
path: 'repotests/railsgoat'
ref: 'c1e8ff1e3b24a1c48fcfc9fbee0f65dc296b49d9'
- name: generate reachables sbom - bionomia
run: |
mkdir -p $GITHUB_WORKSPACE/rubyresults/bionomia
cd repotests/bionomia
docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen-debian-ruby33:v11 -r /app -o /app/bom.json -t ruby --profile research
cp bom.json *.slices.json $GITHUB_WORKSPACE/rubyresults/bionomia
- name: generate reachables sbom - railsgoat
run: |
mkdir -p $GITHUB_WORKSPACE/rubyresults/railsgoat
cd repotests/railsgoat
docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen-debian-ruby26:v11 -r /app -o /app/bom.json -t ruby --profile research
cp bom.json *.slices.json $GITHUB_WORKSPACE/rubyresults/railsgoat
- name: generate reachables sbom - campsite
run: |
mkdir -p $GITHUB_WORKSPACE/rubyresults/campsite
cd repotests/campsite/api
docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen-debian-ruby34:v11 -r /app -o /app/bom.json -t ruby --profile research
cp bom.json *.slices.json $GITHUB_WORKSPACE/rubyresults/campsite
- uses: actions/upload-artifact@v4
with:
name: rubyresults
path: rubyresults
scala-samples:
strategy:
fail-fast: false
matrix:
os: ["ubuntu-24.04"]
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v4
with:
repository: 'playframework/play-samples'
path: 'repotests/play-samples'
ref: '0dccba17856e89dbb5e457ab760efb14cc691395'
- name: setup paths
run: |
mkdir -p repotests
mkdir -p scalaresults
- name: generate reachables sbom - play-scala-rest-api-example
run: |
mkdir -p $GITHUB_WORKSPACE/scalaresults/play-scala-rest-api-example
cd repotests/play-samples/play-scala-rest-api-example
docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen-temurin-java21:v11 -r /app -o /app/bom.json -t scala --profile research
cp *.json $GITHUB_WORKSPACE/scalaresults/play-scala-rest-api-example
- name: generate reachables sbom - play-scala-slick-example
run: |
mkdir -p $GITHUB_WORKSPACE/scalaresults/play-scala-slick-example
cd repotests/play-samples/play-scala-slick-example
docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen-temurin-java21:v11 -r /app -o /app/bom.json -t scala --profile research
cp *.json $GITHUB_WORKSPACE/scalaresults/play-scala-slick-example
- name: generate reachables sbom - play-scala-starter-example/
run: |
mkdir -p $GITHUB_WORKSPACE/scalaresults/play-scala-starter-example
cd repotests/play-samples/play-scala-starter-example
docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen-temurin-java21:v11 -r /app -o /app/bom.json -t scala --profile research
cp *.json $GITHUB_WORKSPACE/scalaresults/play-scala-starter-example
- uses: actions/upload-artifact@v4
with:
name: scalaresults
path: scalaresults