fix: correct uv pip compile flag (--no-deps instead of --no-dev)
This commit is contained in:
parent
b4fc594d30
commit
bc82574fb0
@ -111,7 +111,13 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
UV_NO_PROGRESS: "1"
|
UV_NO_PROGRESS: "1"
|
||||||
run: |
|
run: |
|
||||||
uv pip compile pyproject.toml --no-dev -o requirements-prod.txt && uv run pip-audit --format json --output audit-results.json -r requirements-prod.txt && test ! -s audit-results.json || test "$(cat audit-results.json)" = "[]"
|
uv pip compile pyproject.toml --no-deps -o requirements-prod.txt
|
||||||
|
uv run pip-audit --format json --output audit-results.json -r requirements-prod.txt || true
|
||||||
|
if [ -s audit-results.json ] && [ "$(cat audit-results.json)" != "[]" ]; then
|
||||||
|
echo "❌ Found vulnerabilities"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo "✅ No vulnerabilities found"
|
||||||
|
|
||||||
- name: Upload audit log
|
- name: Upload audit log
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v3
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user