mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-05-06 17:09:00 -04:00
Only run pip-audit on runtime dependencies in CI
This commit is contained in:
2
.github/workflows/daily_checks.yml
vendored
2
.github/workflows/daily_checks.yml
vendored
@@ -38,7 +38,7 @@ jobs:
|
||||
- uses: ./.github/actions/setup-project
|
||||
- uses: trailofbits/gh-action-pip-audit@v1.0.0
|
||||
with:
|
||||
inputs: requirements.txt requirements_for_test.txt
|
||||
inputs: requirements.txt
|
||||
ignore-vulns: PYSEC-2022-237
|
||||
- name: Run npm audit
|
||||
run: make npm-audit
|
||||
|
||||
Reference in New Issue
Block a user