name: Android Security

on:
  push:
    paths:
      - 'android/native/**'
      - '.github/workflows/android-security.yml'
  pull_request:
    paths:
      - 'android/native/**'
      - '.github/workflows/android-security.yml'

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'
      - name: Android lint
        working-directory: android/native
        run: ./gradlew :app:lintProductionRelease
      - name: Scan dependencies with OSV
        uses: google/osv-scanner-action/osv-scanner-action@v2.0.2
        with:
          scan-args: |-
            --recursive android/native