darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-02-05 02:42:26 -05:00
Code Issues Packages Projects Releases Wiki Activity

Only run pip-audit on runtime dependencies in CI

Browse Source
This commit is contained in:
Ryan Ahearn
2022-10-19 10:39:46 -04:00
parent 04aba21296
commit 773cd99790
4 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/checks.yml vendored
View File

@@ -47,7 +47,7 @@ jobs:
- uses: ./.github/actions/setup-project - uses: ./.github/actions/setup-project
- uses: trailofbits/gh-action-pip-audit@v1.0.0 - uses: trailofbits/gh-action-pip-audit@v1.0.0
with: with:
inputs: requirements.txt requirements_for_test.txt inputs: requirements.txt
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237
- name: Run npm audit - name: Run npm audit
run: make npm-audit run: make npm-audit

2
.github/workflows/daily_checks.yml vendored
View File

@@ -38,7 +38,7 @@ jobs:
- uses: ./.github/actions/setup-project - uses: ./.github/actions/setup-project
- uses: trailofbits/gh-action-pip-audit@v1.0.0 - uses: trailofbits/gh-action-pip-audit@v1.0.0
with: with:
inputs: requirements.txt requirements_for_test.txt inputs: requirements.txt
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237
- name: Run npm audit - name: Run npm audit
run: make npm-audit run: make npm-audit

3
Makefile
View File

@@ -76,7 +76,8 @@ freeze-requirements: ## create static requirements.txt
.PHONY: pip-audit .PHONY: pip-audit
pip-audit: pip-audit:
pip install --upgrade pip-audit pip install --upgrade pip-audit
pip-audit -r requirements.txt -r requirements_for_test.txt -l --ignore-vuln PYSEC-2022-237 pip-audit -r requirements.txt -l --ignore-vuln PYSEC-2022-237
-pip-audit -r requirements_for_test.txt -l
.PHONY: audit .PHONY: audit
audit: npm-audit pip-audit audit: npm-audit pip-audit

8
devcontainer-admin/scripts/notify-admin-entrypoint.sh
View File

@@ -20,14 +20,14 @@ echo -e "alias lt='exa -al -T -L 2'" >> ~/.zshrc
cd /workspace cd /workspace
# Warm up git index prior to display status in prompt else it will
# be quite slow on every invocation of starship.
git status
pip3 install -r requirements.txt pip3 install -r requirements.txt
make bootstrap make bootstrap
# run flask # run flask
# make run # make run
# Warm up git index prior to display status in prompt else it will
# be quite slow on every invocation of starship.
git status
echo "FINISHED ENTRYPOINT SCRIPT" echo "FINISHED ENTRYPOINT SCRIPT"