ci: Add audit for python dependencies via pip-audit
This commit is contained in:
parent
09229029da
commit
593fd0a178
1 changed files with 22 additions and 0 deletions
22
.github/workflows/deps-checker.yml
vendored
Normal file
22
.github/workflows/deps-checker.yml
vendored
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
name: 'Python Dependency Check'
|
||||
on:
|
||||
pull_request:
|
||||
workflow_dispatch:
|
||||
push:
|
||||
branches: [ develop ]
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
deps-vulnerable-check:
|
||||
name: 'Vulnerable Dependency'
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- uses: actions/setup-python@v4
|
||||
with:
|
||||
python-version: 3.8
|
||||
- uses: actions/checkout@v3
|
||||
- run: pip install pip-audit
|
||||
- run: pip-audit ${GITHUB_WORKSPACE}
|
||||
Loading…
Add table
Reference in a new issue