From d2b673cc0f0804faa709f3ec36e201a0e188c8a8 Mon Sep 17 00:00:00 2001 From: Paperclip CTO Date: Tue, 19 May 2026 13:58:21 +0200 Subject: [PATCH] ci: fix migration check order and harden security workflow --- .gitea/workflows/security.yml | 4 ++-- .gitea/workflows/tests.yml | 2 +- .github/workflows/security.yml | 4 ++-- .github/workflows/tests.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml index 5baf899..729a763 100644 --- a/.gitea/workflows/security.yml +++ b/.gitea/workflows/security.yml @@ -19,6 +19,6 @@ jobs: - name: Install dependencies run: pip install -r requirements/test.txt bandit pip-audit - name: Run Bandit - run: bandit -r . -x tests + run: bandit -r . -lll -x tests,*/tests,.venv,.venv-test,.pytest_cache,.ruff_cache - name: Run pip-audit - run: pip-audit + run: pip-audit -r requirements/base.txt -r requirements/test.txt diff --git a/.gitea/workflows/tests.yml b/.gitea/workflows/tests.yml index 4a896d8..31cff1c 100644 --- a/.gitea/workflows/tests.yml +++ b/.gitea/workflows/tests.yml @@ -26,7 +26,7 @@ jobs: - name: Install dependencies run: pip install -r requirements/test.txt - name: Check migrations up to date - run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate --check + run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py makemigrations --check --dry-run - name: Run migrations run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate - name: Run smoke + settings tests diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 3ee884b..03bdb44 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -24,7 +24,7 @@ jobs: run: pip install -r requirements/test.txt bandit pip-audit - name: Run Bandit - run: bandit -r . -x tests + run: bandit -r . -lll -x tests,*/tests,.venv,.venv-test,.pytest_cache,.ruff_cache - name: Run pip-audit - run: pip-audit + run: pip-audit -r requirements/base.txt -r requirements/test.txt diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 00242b2..0dc36a9 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -35,7 +35,7 @@ jobs: run: pip install -r requirements/test.txt - name: Check migrations up to date - run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate --check + run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py makemigrations --check --dry-run - name: Run migrations run: DJANGO_SETTINGS_MODULE=config.settings.test DATABASE_URL=sqlite:////tmp/training_test.sqlite3 REDIS_URL=redis://localhost:6379/0 python manage.py migrate