ci: Add audit for python dependencies via pip-audit

This commit is contained in:
Gavin D'souza 2022-06-20 17:00:30 +05:30 committed by gavin
parent 09229029da
commit 593fd0a178

22
.github/workflows/deps-checker.yml vendored Normal file
View file

@ -0,0 +1,22 @@
name: 'Python Dependency Check'
on:
pull_request:
workflow_dispatch:
push:
branches: [ develop ]
permissions:
contents: read
jobs:
deps-vulnerable-check:
name: 'Vulnerable Dependency'
runs-on: ubuntu-latest
steps:
- uses: actions/setup-python@v4
with:
python-version: 3.8
- uses: actions/checkout@v3
- run: pip install pip-audit
- run: pip-audit ${GITHUB_WORKSPACE}