From ab97d77d2df349ba1419e8f086cca5fdf5c83653 Mon Sep 17 00:00:00 2001 From: Philipp Horstenkamp Date: Thu, 26 Oct 2023 18:50:24 +0200 Subject: [PATCH] Made pip-audit pass on every build. (#272) Since dependabot is activated this can be reduced as an reporting tool. --- .github/workflows/lint-actions.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/lint-actions.yaml b/.github/workflows/lint-actions.yaml index c26c11b..149e6ab 100644 --- a/.github/workflows/lint-actions.yaml +++ b/.github/workflows/lint-actions.yaml @@ -59,6 +59,9 @@ jobs: - name: Check license run: | poetry run pip-licenses --format=markdown --output-file=license-summary.md + - name: Check requirements security with pip-audit + run: | + poetry run pip-audit --format markdown -o lbr-audit.md || true - name: Archive license summary uses: actions/upload-artifact@v3 with: @@ -66,6 +69,4 @@ jobs: path: | license-summary.md requirements.txt - - name: Check requirements security with pip-audit - run: | - poetry run pip-audit --format markdown -o lbr-audit.md + lbr-audit.md