-
Notifications
You must be signed in to change notification settings - Fork 12.9k
69 lines (68 loc) · 2.04 KB
/
security-ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
on:
push:
branches:
- "master"
pull_request:
branches:
- "*"
workflow_dispatch:
inputs:
logLevel:
description: "Log level"
required: true
default: "warning"
jobs:
bandit-analysis:
name: Bandit Analysis
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Install dependencies
run: pip install bandit
- name: Run Bandit security scanner
run: |
bandit -r ./ --severity high
pip-audit:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Create virtual environment for pip-audit
run: python3 -m venv audit-env
- name: Activate virtual environment for pip-audit
run: source audit-env/bin/activate
- name: Install pip-audit and dependencies
run: |
sudo apt-get update
pip install --upgrade configobj
pip install --upgrade twisted
pip install --upgrade wheel
pip install --upgrade oauthlib
sudo apt-get install -y libsasl2-dev
pip install -r requirements/local.txt pip-audit
- name: Run pip-audit
run: pip-audit
- name: Deactivate virtual environment for pip-audit
run: deactivate
safety:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Create virtual environment for safety
run: python3 -m venv safety-env
- name: Activate virtual environment for safety
run: source safety-env/bin/activate
- name: Install dependencies
run: |
sudo apt-get update
pip install --upgrade twisted
pip install --upgrade wheel
pip install --upgrade oauthlib
sudo apt-get install -y libsasl2-dev
pip install -r requirements/local.txt safety
- name: Run safety check
run: safety check --full-report
- name: Deactivate virtual environment for safety
run: deactivate