Merge branch 'main' into security-automation-additions-latest-main #26

	name: Dependency Check Scan

	on:
	push:
	branches:
	# - main
	- security-automation-additions-latest-main
	pull_request:
	types: [opened, synchronize, reopened]
	branches:
	# - main
	- security-automation-additions-latest-main
	workflow_dispatch:
	# inputs:
	env:
	FHIR_BASE_URL: ${{secrets.FHIR_BASE_URL}}
	OAUTH_BASE_URL: ${{secrets.OAUTH_BASE_URL}}
	OAUTH_CIENT_ID: ${{secrets.OAUTH_CIENT_ID}}
	OAUTH_CLIENT_SECRET: ${{secrets.OAUTH_CLIENT_SECRET}}
	OAUTH_SCOPE: ${{secrets.OAUTH_SCOPE}}
	MAPBOX_SDK_TOKEN: ${{secrets.MAPBOX_SDK_TOKEN}}

	jobs:
	dependency-check:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v2
	with:
	fetch-depth: 0

	- name: Set up JDK
	uses: actions/setup-java@v3
	with:
	java-version: 11
	distribution: temurin

	- name: Grant execute permission for gradlew
	run: chmod +x gradlew
	working-directory: android

	- name: Run Dependency Check
	run: \|
	cd android
	./gradlew dependencyCheckAggregate

	- name: Upload Dependency Check report in XML format
	uses: actions/upload-artifact@v2
	with:
	name: dependency-check-report
	path: android/build/reports/dependency-check-report.xml



	# - name: Run Dependency Check
	# uses: dependency-check/Dependency-Check_Action@main
	# env:
	# JAVA_HOME: /opt/jdk
	# with:
	# project: "fhircore"
	# path: "."
	# format: 'XML'
	# out: 'reports'

Provide feedback