mirror of
https://github.com/planetmint/planetmint.git
synced 2026-03-19 06:38:46 +00:00
9a74a9c987
* simplified CI workflows * added docker image publishing on gh * added arm buildxy * added CI changes * adjusted CI workflow * fixed some vulnerability by upgrading dependencies * changed Dockerfile-dev to be the default Signed-off-by: Jürgen Eckel <juergen@riddleandcode.com>
35 lines
873 B
YAML
35 lines
873 B
YAML
# Copyright © 2020 Interplanetary Database Association e.V.,
|
|
# Planetmint and IPDB software contributors.
|
|
# SPDX-License-Identifier: (Apache-2.0 AND CC-BY-4.0)
|
|
# Code is Apache-2.0 and docs are CC-BY-4.0
|
|
|
|
name: Audit
|
|
on:
|
|
schedule:
|
|
- cron: '0 2 * * *'
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Setup python
|
|
uses: actions/setup-python@v4
|
|
with:
|
|
python-version: 3.9
|
|
|
|
- name: Install pip-audit
|
|
run: pip install --upgrade pip pip-audit
|
|
|
|
- name: Install dependencies
|
|
run: pip install .
|
|
|
|
- name: Create requirements.txt
|
|
run: pip freeze > requirements.txt
|
|
|
|
- name: Audit dependencies
|
|
run: pip-audit --ignore-vuln PYSEC-2022-42969 --ignore-vuln PYSEC-2022-203 --ignore-vuln GHSA-r9hx-vwmv-q579
|