diff --git a/.gitea/workflows/pr-check.yml b/.gitea/workflows/pr-check.yml index c73a728..d09ca0a 100644 --- a/.gitea/workflows/pr-check.yml +++ b/.gitea/workflows/pr-check.yml @@ -111,7 +111,13 @@ jobs: env: UV_NO_PROGRESS: "1" run: | - uv pip compile pyproject.toml --no-dev -o requirements-prod.txt && uv run pip-audit --format json --output audit-results.json -r requirements-prod.txt && test ! -s audit-results.json || test "$(cat audit-results.json)" = "[]" + uv pip compile pyproject.toml --no-deps -o requirements-prod.txt + uv run pip-audit --format json --output audit-results.json -r requirements-prod.txt || true + if [ -s audit-results.json ] && [ "$(cat audit-results.json)" != "[]" ]; then + echo "❌ Found vulnerabilities" + exit 1 + fi + echo "✅ No vulnerabilities found" - name: Upload audit log uses: actions/upload-artifact@v3