Create _new_01_maven.yml

TechRatanraj · web-flow · commit 3d0c6da84c94 · 2025-03-01T20:45:54.000+05:30
diff --git a/.github/workflows/_new_01_maven.yml b/.github/workflows/_new_01_maven.yml
@@ -0,0 +1,45 @@
+# This workflow builds a Java project with Maven and runs Semgrep for security analysis.
+
+name: Java CI with Maven
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: maven
+
+      - name: Build with Maven
+        run: mvn -B package --file pom.xml
+
+  semgrep:
+    name: Semgrep Security Scan
+    runs-on: ubuntu-latest
+    container:
+      image: semgrep/semgrep  # A Docker image with Semgrep installed
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run Semgrep Security Scan
+        run: semgrep ci --sarif > semgrep.sarif
+        env:
+          SEMGREP_APP_TOKEN: "19d358dbf82a2eada869bdf122783707890b6c26db7f386908691c8e3e27465f"  # Use a GitHub Secret instead of a hardcoded token
+
+
+    
