mirror of
https://github.com/GSA/notifications-api.git
synced 2025-12-20 23:41:17 -05:00
try bandit artifact
This commit is contained in:
7
.github/workflows/checks.yml
vendored
7
.github/workflows/checks.yml
vendored
@@ -92,7 +92,12 @@ jobs:
|
|||||||
- name: Install bandit
|
- name: Install bandit
|
||||||
run: pip install bandit
|
run: pip install bandit
|
||||||
- name: Run scan
|
- name: Run scan
|
||||||
run: bandit -r app/ --confidence-level medium
|
run: bandit -r app/ -f txt -o /tmp/bandit-output.txt --confidence-level medium
|
||||||
|
- name: Upload bandit artifact
|
||||||
|
uses: action/upload-artifact@v3
|
||||||
|
with:
|
||||||
|
name: bandit-report
|
||||||
|
path: /tmp/bandit-output.txt
|
||||||
|
|
||||||
dynamic-scan:
|
dynamic-scan:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|||||||
Reference in New Issue
Block a user