mirror of
https://github.com/GSA/notifications-api.git
synced 2026-02-02 09:26:08 -05:00
move checks to daily run only
This commit is contained in:
7
.github/workflows/daily_checks.yml
vendored
7
.github/workflows/daily_checks.yml
vendored
@@ -44,7 +44,12 @@ jobs:
|
||||
- name: Install bandit
|
||||
run: pip install bandit
|
||||
- name: Run scan
|
||||
run: bandit -r app/ --confidence-level medium
|
||||
run: bandit -r app/ -f txt -o /tmp/bandit-output.txt --confidence-level medium
|
||||
- name: Upload bandit artifact
|
||||
uses: actions/upload-artifact@v3
|
||||
with:
|
||||
name: bandit-report
|
||||
path: /tmp/bandit-output.txt
|
||||
|
||||
dynamic-scan:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
Reference in New Issue
Block a user