diff --git a/.github/workflows/dotnet-core.yml b/.github/workflows/dotnet-core.yml index ef1c7e5..2414fb2 100644 --- a/.github/workflows/dotnet-core.yml +++ b/.github/workflows/dotnet-core.yml @@ -25,20 +25,9 @@ jobs: - name: Install dependencies run: dotnet restore - - name: Check for vulnerable packages - run: | - set -e # This will cause the script to exit on the first error - OUTPUT=$(dotnet list package --vulnerable) - echo "$OUTPUT" - if echo "$OUTPUT" | grep -q 'no vulnerable packages'; then - echo "No vulnerable packages found" - else - if echo "$OUTPUT" | grep -q 'vulnerable'; then - echo "Vulnerable packages found" - exit 1 - fi - fi - + - name: Check vulnerable NuGet packages + uses: elmahio/github-check-vulnerable-nuget-packages-action@v1 + - name: Build run: dotnet build --configuration Release --no-restore