much-data/kwork-api
2
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: simplify security check to single command

Browse Source
This commit is contained in:
root 2026-03-29 08:39:32 +00:00
parent 91eec1ae2d
commit d5dc677789
1 changed files with 1 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
.gitea/workflows/pr-check.yml
View File

@ -88,20 +88,7 @@ jobs:
env: env:
UV_NO_PROGRESS: "1" UV_NO_PROGRESS: "1"
run: | run: |
echo "Running pip-audit on production dependencies..." uv pip compile pyproject.toml --no-dev -o requirements-prod.txt && uv run pip-audit --format json --output audit-results.json -r requirements-prod.txt && test ! -s audit-results.json || test "$(cat audit-results.json)" = "[]"
# Audit only production dependencies (exclude dev)
uv pip compile pyproject.toml --no-dev -o requirements-prod.txt
uv run pip-audit --format json --output audit-results.json -r requirements-prod.txt || true
# Check if vulnerabilities found
if [ -s audit-results.json ] && [ "$(cat audit-results.json)" != "[]" ]; then
echo "❌ Found vulnerabilities in production dependencies"
echo "📄 Audit log uploaded as artifact 'security-audit'"
exit 1
else
echo "✅ No vulnerabilities in production dependencies"
rm -f audit-results.json
fi
- name: Upload audit log - name: Upload audit log
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v3