darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-23 15:57:23 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add python static scan task

Browse Source
This commit is contained in:
Ryan Ahearn
2022-08-26 14:12:26 +00:00
parent 1e987cce49
commit 8b6210eedb
3 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
.github/workflows/checks.yml vendored
View File

@@ -52,3 +52,13 @@ jobs:
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237
- name: Run npm audit - name: Run npm audit
run: make npm-audit run: make npm-audit
static-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: ./.github/actions/setup-project
- name: Install bandit
run: pip install bandit
- name: Run scan
run: bandit -r app/ --confidence-level medium

10
.github/workflows/daily_checks.yml vendored
View File

@@ -42,3 +42,13 @@ jobs:
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237
- name: Run npm audit - name: Run npm audit
run: make npm-audit run: make npm-audit
static-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: ./.github/actions/setup-project
- name: Install bandit
run: pip install bandit
- name: Run scan
run: bandit -r app/ --confidence-level medium

5
Makefile
View File

@@ -81,6 +81,11 @@ pip-audit:
.PHONY: audit .PHONY: audit
audit: npm-audit pip-audit audit: npm-audit pip-audit
.PHONY: static-scan
static-scan:
pip install bandit
bandit -r app/
.PHONY: clean .PHONY: clean
clean: clean:
rm -rf node_modules cache target ${CF_MANIFEST_PATH} rm -rf node_modules cache target ${CF_MANIFEST_PATH}