darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-09-02 17:48:36 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add pip-audit github check

Browse Source
This commit is contained in:
Ryan Ahearn
2022-08-12 16:11:57 +00:00
parent 51a9207069
commit ebc0083330
1 changed files with 20 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
.github/workflows/checks.yml vendored
View File

@@ -66,9 +66,27 @@ jobs:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
# - name: Run style checks # - name: Run style checks
# run: flake8 . # run: flake8 .
# - name: Check imports alphabetized - name: Check imports alphabetized
# run: isort --check-only ./app ./tests run: isort --check-only ./app ./tests
- name: Run tests - name: Run tests
run: pytest -n4 --maxfail=10 run: pytest -n4 --maxfail=10
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
pip-audit:
runs-on: ubuntu-latest
steps:
- name: Install container dependencies
run: |
sudo apt-get update \
&& sudo apt-get install -y --no-install-recommends \
libcurl4-openssl-dev
- uses: actions/checkout@v3
- name: Set up Python 3.9
uses: actions/setup-python@v3
with:
python-version: "3.9"
- uses: trailofbits/gh-action-pip-audit@v1.0.0
with:
inputs: requirements.txt requirements_for_test.txt
ignore-vulns: PYSEC-2022-237