d2b673cc0f
All checks were successful
CI Deploy Checks / Build Container (push) Successful in 8s
CI Quality / Ruff Lint (push) Successful in 8s
CI Security / Bandit + pip-audit (push) Successful in 21s
CI Tests / Django Tests (push) Successful in 38s
CI Tests / OpenAPI Schema (push) Successful in 10s
31 lines
738 B
YAML
31 lines
738 B
YAML
name: CI Security
|
|
|
|
on:
|
|
push:
|
|
branches: [main, develop]
|
|
pull_request:
|
|
branches: [main, develop]
|
|
|
|
jobs:
|
|
security:
|
|
name: Bandit + pip-audit
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Set up Python
|
|
uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.12"
|
|
cache: pip
|
|
cache-dependency-path: requirements/test.txt
|
|
|
|
- name: Install dependencies
|
|
run: pip install -r requirements/test.txt bandit pip-audit
|
|
|
|
- name: Run Bandit
|
|
run: bandit -r . -lll -x tests,*/tests,.venv,.venv-test,.pytest_cache,.ruff_cache
|
|
|
|
- name: Run pip-audit
|
|
run: pip-audit -r requirements/base.txt -r requirements/test.txt
|