Skip to content

Commit

Permalink
security ci added for superset
Browse files Browse the repository at this point in the history
  • Loading branch information
hash-data committed Jun 23, 2023
1 parent 51a34d7 commit fddedad
Showing 1 changed file with 69 additions and 0 deletions.
69 changes: 69 additions & 0 deletions .github/workflows/security-ci.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
on:
push:
branches:
- "master"
pull_request:
branches:
- "*"
workflow_dispatch:
inputs:
logLevel:
description: "Log level"
required: true
default: "warning"

jobs:
bandit-analysis:
name: Bandit Analysis
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Install dependencies
run: pip install bandit
- name: Run Bandit security scanner
run: |
bandit -r ./ --severity high
pip-audit:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Create virtual environment for pip-audit
run: python3 -m venv audit-env
- name: Activate virtual environment for pip-audit
run: source audit-env/bin/activate
- name: Install pip-audit and dependencies
run: |
sudo apt-get update
pip install --upgrade configobj
pip install --upgrade twisted
pip install --upgrade wheel
pip install --upgrade oauthlib
sudo apt-get install -y libsasl2-dev
pip install -r requirements/local.txt pip-audit
- name: Run pip-audit
run: pip-audit
- name: Deactivate virtual environment for pip-audit
run: deactivate
safety:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Create virtual environment for safety
run: python3 -m venv safety-env
- name: Activate virtual environment for safety
run: source safety-env/bin/activate
- name: Install dependencies
run: |
sudo apt-get update
pip install --upgrade twisted
pip install --upgrade wheel
pip install --upgrade oauthlib
sudo apt-get install -y libsasl2-dev
pip install -r requirements/local.txt safety
- name: Run safety check
run: safety check --full-report
- name: Deactivate virtual environment for safety
run: deactivate

0 comments on commit fddedad

Please sign in to comment.