build Steeltoe 4.1 #323

	name: Scan vulnerable dependencies

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	- '[0-9]+.x'
	pull_request:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	env:
	DOTNET_CLI_TELEMETRY_OPTOUT: 1
	DOTNET_NOLOGO: true
	SOLUTION_FILE: 'src/Steeltoe.All.sln'

	jobs:
	scan:
	name: Scan
	timeout-minutes: 15
	runs-on: ubuntu-latest

	steps:
	- name: Setup .NET
	uses: actions/setup-dotnet@v5
	with:
	dotnet-version: \|
	8.0.*
	9.0.*
	10.0.*

	- name: Git checkout
	uses: actions/checkout@v6
	with:
	persist-credentials: false

	- name: Report vulnerable dependencies
	run: dotnet restore ${{ env.SOLUTION_FILE }} --verbosity minimal /p:NuGetAudit=true /p:NuGetAuditMode=all /p:NuGetAuditLevel=low /p:TreatWarningsAsErrors=True

Provide feedback