Made pip-audit pass on every build. (#272)

Since dependabot is activated this can be reduced as an reporting tool.
This commit is contained in:
Philipp Horstenkamp 2023-10-26 18:50:24 +02:00 committed by GitHub
parent 4c56431bff
commit ab97d77d2d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -59,6 +59,9 @@ jobs:
- name: Check license
run: |
poetry run pip-licenses --format=markdown --output-file=license-summary.md
- name: Check requirements security with pip-audit
run: |
poetry run pip-audit --format markdown -o lbr-audit.md || true
- name: Archive license summary
uses: actions/upload-artifact@v3
with:
@ -66,6 +69,4 @@ jobs:
path: |
license-summary.md
requirements.txt
- name: Check requirements security with pip-audit
run: |
poetry run pip-audit --format markdown -o lbr-audit.md
lbr-audit.md