search

detekt / sarif4k

Kotlin data bindings for the Static Analysis Results Interchange Format (SARIF)
Apache License 2.0
15 stars 7 forks source link

Cache CVE database & upload reports #42

Closed TWiStErRob closed 1 year ago

TWiStErRob commented 1 year ago

fixes #24

Testing: https://github.com/detekt/sarif4k/actions/runs/4242662085

Luckily ubuntu job ran first, fully to completion: https://github.com/detekt/sarif4k/actions/runs/4242662085/jobs/7374450595 we can see here that the cache was stored image

Then the mac job ran: https://github.com/detekt/sarif4k/actions/runs/4242662085/jobs/7374450387 and picked up the stored cache image

This should mean that the download won't be flaky, most of the files will exist so there's less to download from NVD.

This also decreased the dependency check runtime from 4.5 minutes to 22 seconds.