darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-18 13:39:41 -04:00
Code Issues Packages Projects Releases Wiki Activity

pipenv in gh actions

Browse Source
This commit is contained in:
stvnrlly
2022-11-08 09:44:41 -05:00
parent e44fe2eb11
commit a0e4e184a9
5 changed files with 18 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.github/workflows/daily_checks.yml vendored
View File

@@ -24,6 +24,8 @@ jobs:
steps:
- uses: actions/checkout@v3
- uses: ./.github/actions/setup-project
- name: Create requirements.txt
run: pipenv requirements > requirements.txt
- uses: trailofbits/gh-action-pip-audit@v1.0.0
with:
inputs: requirements.txt
@@ -36,10 +38,8 @@ jobs:
steps:
- uses: actions/checkout@v3
- uses: ./.github/actions/setup-project
- name: Install bandit
run: pip install bandit
- name: Run scan
run: bandit -r app/ --confidence-level medium
run: pipenv run bandit -r app/ --confidence-level medium
dynamic-scan:
runs-on: ubuntu-latest