juli06/training-software
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: fix migration check order and harden security workflow
All checks were successful
CI Deploy Checks / Build Container (push) Successful in 8s
Details
CI Quality / Ruff Lint (push) Successful in 8s
Details
CI Security / Bandit + pip-audit (push) Successful in 21s
Details
CI Tests / Django Tests (push) Successful in 38s
Details
CI Tests / OpenAPI Schema (push) Successful in 10s
Details

Browse Source
This commit is contained in:
Paperclip CTO
2026-05-19 13:58:21 +02:00
parent b6e5e2cc14
commit d2b673cc0f
4 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.gitea/workflows/security.yml
View File

@@ -19,6 +19,6 @@ jobs:
- name: Install dependencies
run: pip install -r requirements/test.txt bandit pip-audit
- name: Run Bandit
run: bandit -r . -x tests
run: bandit -r . -lll -x tests,*/tests,.venv,.venv-test,.pytest_cache,.ruff_cache
- name: Run pip-audit
run: pip-audit
run: pip-audit -r requirements/base.txt -r requirements/test.txt

2
.gitea/workflows/tests.yml
View File

@@ -26,7 +26,7 @@ jobs:
- name: Install dependencies
run: pip install -r requirements/test.txt
- name: Check migrations up to date
run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate --check
run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py makemigrations --check --dry-run
- name: Run migrations
run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate
- name: Run smoke + settings tests

4
.github/workflows/security.yml vendored
View File

@@ -24,7 +24,7 @@ jobs:
run: pip install -r requirements/test.txt bandit pip-audit
- name: Run Bandit
run: bandit -r . -x tests
run: bandit -r . -lll -x tests,*/tests,.venv,.venv-test,.pytest_cache,.ruff_cache
- name: Run pip-audit
run: pip-audit
run: pip-audit -r requirements/base.txt -r requirements/test.txt

2
.github/workflows/tests.yml vendored
View File

@@ -35,7 +35,7 @@ jobs:
run: pip install -r requirements/test.txt
- name: Check migrations up to date
run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate --check
run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py makemigrations --check --dry-run
- name: Run migrations
run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate