Skip to content
CI

Fix trivy scan rate limits #2121

Sign in to view logs

Fix trivy scan rate limits

Fix trivy scan rate limits #2121

Workflow file for this run

.github/workflows/ci.yaml at 815ab91
name: CI
on: [ push ]
jobs:
pre-commit:
name: Linting
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up python
uses: actions/setup-python@v4
with:
python-version: 3.10.14
# Install poetry
- name: Load cached Poetry installation
uses: actions/cache@v3
with:
path: ~/.local
key: poetry-0
- name: Install Poetry
uses: snok/install-poetry@v1
with:
version: 1.8.3
virtualenvs-create: true
virtualenvs-in-project: true
installer-parallel: true
# Install dependencies
- name: Install dependencies
run: poetry install --no-interaction --no-root
# Run precommit
- name: Run precommit
run: poetry run pre-commit run --all-files
# Markdown lint
- name: markdownlint-cli
uses: nosborn/[email protected]
with:
config_file: .markdownlint.yaml
files: .
dot: true
ignore_files: .venv/
test:
name: Testing
runs-on: ubuntu-latest
env:
ENVIRONMENT: test
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up python
uses: actions/setup-python@v4
with:
python-version: 3.10.14
# Install poetry
- name: Load cached Poetry installation
uses: actions/cache@v3
with:
path: ~/.local
key: poetry-0
- name: Install Poetry
uses: snok/install-poetry@v1
with:
version: 1.8.3
virtualenvs-create: true
virtualenvs-in-project: true
installer-parallel: true
# Install dependencies
- name: Install dependencies
run: poetry install --no-interaction --no-root
# Run tests
- name: Run tests
run: poetry run coverage run -m pytest src
# Check coverage
- name: Check test coverage
run: poetry run coverage report
security:
name: pip-audit
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up python
uses: actions/setup-python@v4
with:
python-version: 3.10.14
# Install poetry
- name: Load cached Poetry installation
uses: actions/cache@v3
with:
path: ~/.local
key: poetry-0
- name: Install Poetry
uses: snok/install-poetry@v1
with:
version: 1.8.3
virtualenvs-create: true
virtualenvs-in-project: true
installer-parallel: true
- name: Install dependencies
run: poetry install --no-interaction --no-root
- name: Export requirements
run: poetry export -f requirements.txt --without-hashes > audit_requirements.txt
# Run audit
- uses: pypa/[email protected]
with:
inputs: audit_requirements.txt