diff --git a/.github/workflows/publish-docker.yml b/.github/workflows/publish-docker.yml index 6a770ad..45f0af4 100644 --- a/.github/workflows/publish-docker.yml +++ b/.github/workflows/publish-docker.yml @@ -3,18 +3,41 @@ # SPDX-License-Identifier: (Apache-2.0 AND CC-BY-4.0) # Code is Apache-2.0 and docs are CC-BY-4.0 ---- name: publish-docker -on: - workflow_dispatch: +on: [workflow_dispatch,push] jobs: - publish-docker: + audit: runs-on: ubuntu-latest + steps: - # Get the repository's code - - name: Checkout - uses: actions/checkout@v2 + - name: Checkout repository + uses: actions/checkout@v3 + + - name: Setup python + uses: actions/setup-python@v4 + with: + python-version: 3.9 + + - name: Install pip-audit + run: pip install --upgrade pip pip-audit + + - name: Install dependencies + run: pip install . + + - name: Create requirements.txt + run: pip freeze > requirements.txt + + - name: Audit dependencies + run: pip-audit + + +# publish-docker: +# runs-on: ubuntu-latest +# steps: +# # Get the repository's code +# - name: Checkout +# uses: actions/checkout@v2 # https://github.com/docker/setup-qemu-action #- name: Set up QEMU # uses: docker/setup-qemu-action@v1