From e941d798ff6ce9975313f722ab14bea2812022e6 Mon Sep 17 00:00:00 2001 From: Matt Shaw Date: Tue, 3 Sep 2024 09:43:20 +0100 Subject: [PATCH] switch from safety to pip-audit --- .github/workflows/python-package.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml index b91a16f..6896749 100644 --- a/.github/workflows/python-package.yml +++ b/.github/workflows/python-package.yml @@ -27,10 +27,10 @@ jobs: - name: Install dependencies run: | python -m pip install --upgrade pip - python -m pip install flake8 safety pytest-cov bandit black + python -m pip install flake8 pip-audit pytest-cov bandit black pip install -r tests/requirements.txt - name: Check dependencies for known security vulnerabilities - run: safety check -r tests/requirements.txt + run: pip-audit -r tests/requirements.txt - name: Check code for potential security vulnerabilities run: bandit -r . - name: Check code formatting