mirror of
https://github.com/fhswf/aki_prj23_transparenzregister.git
synced 2025-05-14 00:28:47 +02:00
Made pip-audit pass on every build. (#272)
Since dependabot is activated this can be reduced as an reporting tool.
This commit is contained in:
parent
4c56431bff
commit
ab97d77d2d
7
.github/workflows/lint-actions.yaml
vendored
7
.github/workflows/lint-actions.yaml
vendored
@ -59,6 +59,9 @@ jobs:
|
||||
- name: Check license
|
||||
run: |
|
||||
poetry run pip-licenses --format=markdown --output-file=license-summary.md
|
||||
- name: Check requirements security with pip-audit
|
||||
run: |
|
||||
poetry run pip-audit --format markdown -o lbr-audit.md || true
|
||||
- name: Archive license summary
|
||||
uses: actions/upload-artifact@v3
|
||||
with:
|
||||
@ -66,6 +69,4 @@ jobs:
|
||||
path: |
|
||||
license-summary.md
|
||||
requirements.txt
|
||||
- name: Check requirements security with pip-audit
|
||||
run: |
|
||||
poetry run pip-audit --format markdown -o lbr-audit.md
|
||||
lbr-audit.md
|
||||
|
Loading…
x
Reference in New Issue
Block a user