Mirroristas/planetmint
2
0
Fork 0
mirror of https://github.com/planetmint/planetmint.git synced 2025-11-24 06:25:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

updated CI audit step to use poetry

Browse Source 
Signed-off-by: Lorenz Herzberger <lorenzherzberger@gmail.com>
This commit is contained in:
Lorenz Herzberger 2023-02-15 14:48:30 +01:00
parent 4bfbcbc298
commit 4d1af96ca8
No known key found for this signature in database
GPG Key ID: FA5EE906EB55316A
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/audit.yml vendored
View File

@ -22,13 +22,16 @@ jobs:
python-version: 3.9
- name: Install pip-audit
run: pip install --upgrade pip pip-audit
run: pip install --upgrade pip
- name: Setup poetry
uses: Gr1N/setup-poetry@v7
- name: Install dependencies
run: pip install .
run: poetry install
- name: Create requirements.txt
run: pip freeze > requirements.txt
run: poetry run pip freeze > requirements.txt
- name: Audit dependencies
run: pip-audit --ignore-vuln PYSEC-2022-42969 --ignore-vuln PYSEC-2022-203 --ignore-vuln GHSA-r9hx-vwmv-q579
run: poetry run pip-audit --ignore-vuln PYSEC-2022-42969 --ignore-vuln PYSEC-2022-203 --ignore-vuln GHSA-r9hx-vwmv-q579