Dep check (#65)

.github/workflows/build.yml

@@ -15,3 +15,30 @@ jobs:
           java-version: [email protected]
       - name: Test
         run: sbt +test
+
+  dependency-check:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Setup Scala
+        uses: olafurpg/setup-scala@v11
+        with:
+          java-version: [email protected]
+      - name: Assembly
+        run: sbt "project secret-provider;set assembly / test := {}" assembly
+      - name: Dependency Check
+        uses: dependency-check/[email protected]
+        env:
+          # actions/setup-java@v1 changes JAVA_HOME so it needs to be reset to match the depcheck image
+          JAVA_HOME: /opt/jdk
+        with:
+          project: secret-provider-deps
+          path: secret-provider/target/libs/
+          format: 'HTML'
+      - name: Upload Test results
+        uses: actions/upload-artifact@master
+        with:
+          name: secret-provider-depcheck-results
+          path: ${{github.workspace}}/reports

build.sbt

@@ -4,6 +4,7 @@ import Settings.artifactVersion
 import Settings.AssemblyConfigurator
 import Settings.testSinkDeps
 import Settings.scala213
+import Settings.Dependencies.`jsonSmart`
 import sbt.Project.projectToLocalProject
 
 name := "secret-provider"
@@ -37,6 +38,9 @@ lazy val `secret-provider` = (project in file("secret-provider"))
         description := "Kafka Connect compatible connectors to move data between Kafka and popular data stores",
         publish / skip := true,
         libraryDependencies ++= secretProviderDeps,
+        dependencyOverrides ++= Seq(
+          `jsonSmart`,
+        )
       ),
   )
   .configureAssembly()