trying to fix issue

Author: emmanuel-knafo

.github/workflows/oss_pygoat-devsecops-advanced.yml

@@ -204,30 +204,19 @@ jobs:
     steps:
       - name: checkout
         uses: actions/checkout@v4.1.0
-      - name: Gitleaks
-        continue-on-error: true
-        # You may pin to the exact commit or the version.
-        # uses: gitleaks/gitleaks-action@e6dab246340401bf53eec993b8f05aebe80ac636
-        uses: gitleaks/gitleaks-action@v2.3.4
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          #GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
-      - name: Depcheck
-        uses: dependency-check/Dependency-Check_Action@main
-        id: Depcheck
-        with:
-          project: 'test'
-          path: '.'
-          format: 'HTML'
-          out: 'reports' # this is the default, no need to specify unless you wish to override it
-          args: >
-            --failOnCVSS 7
-            --enableRetired
-      - name: Upload Test results
-        uses: actions/upload-artifact@master
+      # - name: Gitleaks
+      #   continue-on-error: true
+      #   # You may pin to the exact commit or the version.
+      #   # uses: gitleaks/gitleaks-action@e6dab246340401bf53eec993b8f05aebe80ac636
+      #   uses: gitleaks/gitleaks-action@v2.3.4
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      #     #GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v4.3.2
         with:
-           name: Depcheck report
-           path: ${{github.workspace}}/reports
+          base-ref: ${{ github.ref }}
+          head-ref: ${{ github.sha }}
   test-run_devopsshield_scan_linux:
     name: Run DevOps Shield Scan Linux
     needs:

.github/workflows/oss_pygoat-devsecops-basic.yml

@@ -155,6 +155,9 @@ jobs:
       #     #GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
       - name: Dependency Review
         uses: actions/dependency-review-action@v4.3.2
+        with:
+          base-ref: ${{ github.ref }}
+          head-ref: ${{ github.sha }}
   test-run_devopsshield_scan_linux:
     name: Run DevOps Shield Scan Linux
     needs: