fosstars-report.yml

# SPDX-FileCopyrightText: 2022 WebReady Projects <https://github.com/wr-projects/>
#
# SPDX-License-Identifier: MIT
---
name: Pipeline - Fosstars

on:
  push:
    branches: [ main ]

  schedule:
    - cron: '0 0 * * *'

permissions:
  checks: read
  contents: read
  pull-requests: write

jobs:

  create_fosstars_report:

    name: Security Rating
    runs-on: ubuntu-latest
    steps:

      # More info: https://github.com/step-security/harden-runner.
      - name: Harden Runner
        id: harden_runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            api.github.com:443
            github.com:443
            lgtm.com:443
            nvd.nist.gov:443
            raw.githubusercontent.com:443
            repo.maven.apache.org:443

      # More info: https://github.com/peter-murray/workflow-application-token-action.
      - name: Get token
        id: get_token
        uses: peter-murray/workflow-application-token-action@8e4e6fbf6fcc8a272781d97597969d21b3812974
        with:
          application_id: ${{ secrets.ID_FOSSTARSBOT }}
          application_private_key: ${{ secrets.PEM_FOSSTARSBOT }}

      # More info: https://github.com/actions/checkout.
      - name: Checkout & Authentication
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
        with:
          token: ${{ steps.get_token.outputs.token }}
          persist-credentials: false
          fetch-depth: 0

      # More info: https://github.com/SAP/fosstars-rating-core-action.
      - name: Security Report
        uses: SAP/fosstars-rating-core-action@daf10c3920b53405f6013ee987e7015525fdec30
        with:
          rating: security
          report-branch: fosstars-report
          report-file: .github/wiki/fosstars_security_rating.md
          badge-file: .github/assets/fosstars_security_rating.svg
          #token: ${{ steps.get_token.outputs.token }}