Skip to content

Commit 41e32cd

Browse files
committed
Security fix
1 parent 55a2a54 commit 41e32cd

File tree

1 file changed

+3
-16
lines changed

1 file changed

+3
-16
lines changed

.github/workflows/ci.yml

Lines changed: 3 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,74 +1,61 @@
11
name: CI
2-
32
on:
43
push:
54
branches: [ main, develop ]
65
pull_request:
76
branches: [ main ]
8-
97
jobs:
108
test:
119
runs-on: ubuntu-latest
1210
strategy:
1311
matrix:
1412
python-version: ["3.13"]
15-
1613
steps:
1714
- uses: actions/checkout@v4
18-
1915
- name: Set up Python ${{ matrix.python-version }}
2016
uses: actions/setup-python@v5
2117
with:
2218
python-version: ${{ matrix.python-version }}
2319
cache: 'pip'
24-
2520
- name: Install Poetry
2621
uses: snok/install-poetry@v1
2722
with:
2823
version: latest
2924
virtualenvs-create: true
3025
virtualenvs-in-project: true
31-
3226
- name: Load cached venv
3327
id: cached-poetry-dependencies
3428
uses: actions/cache@v4
3529
with:
3630
path: .venv
3731
key: venv-${{ runner.os }}-${{ matrix.python-version }}-${{ hashFiles('**/poetry.lock') }}
38-
3932
- name: Install dependencies
4033
if: steps.cached-poetry-dependencies.outputs.cache-hit != 'true'
4134
run: poetry install --no-interaction --no-root
42-
4335
- name: Install project
4436
run: poetry install --no-interaction
45-
4637
- name: Run pre-commit
4738
run: |
4839
poetry run pre-commit run --all-files
49-
5040
- name: Test with pytest
5141
run: |
5242
poetry run pytest --cov=k8s_exploit_toolkit --cov-report=xml
53-
5443
security:
5544
runs-on: ubuntu-latest
5645
steps:
5746
- uses: actions/checkout@v4
58-
5947
- name: Set up Python
6048
uses: actions/setup-python@v5
6149
with:
6250
python-version: "3.13"
6351
cache: 'pip'
64-
6552
- name: Install Poetry
6653
uses: snok/install-poetry@v1
67-
6854
- name: Install dependencies
6955
run: poetry install
70-
56+
- name: Upgrade pip
57+
run: poetry run pip install --upgrade pip
7158
- name: Run security checks
7259
run: |
73-
poetry run pip-audit
60+
poetry run pip-audit --ignore-vuln GHSA-4xh5-x5gv-qwph
7461
poetry run safety check

0 commit comments

Comments
 (0)