RugMunchMedia/pryscraper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ci: isolate bandit venv outside repo scan path
All checks were successful
CI / lint (pull_request) Successful in 47s
Details
CI / typecheck (pull_request) Successful in 50s
Details
CI / Secret scan (gitleaks) (pull_request) Successful in 31s
Details
CI / test (pull_request) Successful in 1m7s
Details
CI / Security audit (bandit) (pull_request) Successful in 33s
Details

Browse source
This commit is contained in:
Crypto Rug Munch 2026-07-03 00:36:44 +02:00
parent c981e30c00
commit f29112e8b9
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.forgejo/workflows/ci.yml
View file

@ -150,7 +150,7 @@ jobs:
ln -sf /root/.local/bin/uv /usr/local/bin/uv
ln -sf /root/.local/bin/uvx /usr/local/bin/uvx
uv python install 3.11
uv venv --python 3.11 .venv
uv pip install --python .venv/bin/python bandit
uv venv --python 3.11 /tmp/bandit-venv
uv pip install --python /tmp/bandit-venv/bin/python bandit
- name: Bandit (high+medium severity)
run: source .venv/bin/activate && bandit -r . -x tests/,.venv,__pycache__ -ll
run: source /tmp/bandit-venv/bin/activate && bandit -r . -x tests/,.venv,__pycache__ -ll