cli-reachability-windows.yml

name: Mend Reachability CLI Scan (Windows)

on: workflow_dispatch

jobs:
  build-and-mend-scan:
    runs-on: windows-latest 

    steps:
    - name: 'Checkout GitHub Action'
      uses: actions/checkout@v3

    - name: Setup Java Sdk
      uses: actions/setup-java@v1
      with:
        java-version: 11

    - name: Build with Maven
      shell: pwsh 
      run: mvn clean install -DskipTests

# The mend dep scan should be called AFTER a package manager build step such as "mvn clean install -DskipTests=true" or "npm install --only=prod"
    - name: Mend CLI Download
      env:
        MEND_EMAIL: ${{secrets.MEND_EMAIL}}
        MEND_USER_KEY: ${{secrets.MEND_USER_KEY}}
        MEND_URL: https://saas.whitesourcesoftware.com
      run: |
        echo '=== Downloading Mend CLI =='
        curl https://downloads.mend.io/cli/windows_amd64/mend.exe -o mend.exe
        echo '=== Mend CLI version: ==='
        .\mend.exe version

    - name: Mend CLI Scan
      env:
        MEND_EMAIL: ${{secrets.MEND_EMAIL}}
        MEND_USER_KEY: ${{secrets.MEND_USER_KEY}}
        MEND_URL: https://saas.whitesourcesoftware.com
      run: |
        echo '=== Running Scan ==='
        .\mend.exe dep -u -r
      continue-on-error: true

    - name: Mend CLI Logs
      run: cat ~/.mend/logs/sca/*.log
      continue-on-error: true