diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index d59e385bb..c6aef0e85 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -78,11 +78,6 @@ jobs: - uses: pypa/gh-action-pip-audit@v1.0.6 with: inputs: requirements.txt - - name: Upload pip-audit artifact - uses: actions/upload-artifact@v3 - with: - name: pip-audit-report - path: /tmp/pip-audit-output.txt static-scan: runs-on: ubuntu-latest @@ -92,12 +87,7 @@ jobs: - name: Install bandit run: pip install bandit - name: Run scan - run: bandit -r app/ -f txt -o /tmp/bandit-output.txt --confidence-level medium - - name: Upload bandit artifact - uses: actions/upload-artifact@v3 - with: - name: bandit-report - path: /tmp/bandit-output.txt + run: bandit -r app/ --confidence-level medium dynamic-scan: runs-on: ubuntu-latest diff --git a/.github/workflows/daily_checks.yml b/.github/workflows/daily_checks.yml index bc65b2cf9..7239002e9 100644 --- a/.github/workflows/daily_checks.yml +++ b/.github/workflows/daily_checks.yml @@ -44,7 +44,12 @@ jobs: - name: Install bandit run: pip install bandit - name: Run scan - run: bandit -r app/ --confidence-level medium + run: bandit -r app/ -f txt -o /tmp/bandit-output.txt --confidence-level medium + - name: Upload bandit artifact + uses: actions/upload-artifact@v3 + with: + name: bandit-report + path: /tmp/bandit-output.txt dynamic-scan: runs-on: ubuntu-latest