darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-26 01:04:00 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #313 from GSA/pip-audit-mitigation

Browse Source 
Update pip-audit action
This commit is contained in:
Ryan Ahearn
2023-01-03 10:06:46 -05:00
committed by GitHub
parent 8ed7124c0a 197c17c1a9
commit b39259ab6f
3 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/checks.yml vendored
View File

@@ -38,7 +38,7 @@ jobs:
- uses: ./.github/actions/setup-project - uses: ./.github/actions/setup-project
- name: Create requirements.txt - name: Create requirements.txt
run: pipenv requirements > requirements.txt run: pipenv requirements > requirements.txt
- uses: trailofbits/gh-action-pip-audit@v1.0.0 - uses: pypa/gh-action-pip-audit@v1.0.4
with: with:
inputs: requirements.txt inputs: requirements.txt
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237

2
.github/workflows/daily_checks.yml vendored
View File

@@ -26,7 +26,7 @@ jobs:
- uses: ./.github/actions/setup-project - uses: ./.github/actions/setup-project
- name: Create requirements.txt - name: Create requirements.txt
run: pipenv requirements > requirements.txt run: pipenv requirements > requirements.txt
- uses: trailofbits/gh-action-pip-audit@v1.0.0 - uses: pypa/gh-action-pip-audit@v1.0.4
with: with:
inputs: requirements.txt inputs: requirements.txt
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237

6
Makefile
View File

@@ -69,8 +69,10 @@ freeze-requirements: ## create static requirements.txt
.PHONY: pip-audit .PHONY: pip-audit
pip-audit: pip-audit:
pipenv run pip-audit -r requirements.txt -l --ignore-vuln PYSEC-2022-237 pipenv requirements > requirements.txt
-pipenv run pip-audit -r requirements_for_test.txt -l pipenv requirements --dev > requirements_for_test.txt
pipenv run pip-audit -r requirements.txt --ignore-vuln PYSEC-2022-237
-pipenv run pip-audit -r requirements_for_test.txt
.PHONY: audit .PHONY: audit
audit: npm-audit pip-audit audit: npm-audit pip-audit