Skip to content

Bump eslint-plugin-n from 16.0.2 to 16.1.0 in /tcms #4930

Bump eslint-plugin-n from 16.0.2 to 16.1.0 in /tcms

Bump eslint-plugin-n from 16.0.2 to 16.1.0 in /tcms #4930

Workflow file for this run

name: security
on:
push:
branches: master
pull_request:
permissions: read-all
jobs:
checkov:
runs-on: ubuntu-latest
strategy:
matrix:
python-version: [3.9]
steps:
- uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v4
with:
python-version: ${{ matrix.python-version }}
- name: Check with checkov
run: |
pip install checkov
checkov --quiet --directory .
bandit:
runs-on: ubuntu-latest
strategy:
matrix:
python-version: [3.9]
steps:
- uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v4
with:
python-version: ${{ matrix.python-version }}
- name: Check with bandit
run: |
pip install bandit
make bandit
# this is expected to fail b/c bandit detects lots of issues
# from 3rd party libraries!
bandit_site_packages:
runs-on: ubuntu-latest
strategy:
matrix:
python-version: [3.9]
steps:
- uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v4
with:
python-version: ${{ matrix.python-version }}
- name: Check with bandit
run: |
pip install bandit
pip install -r requirements/mariadb.txt
pip install -r requirements/postgres.txt
make bandit_site_packages
# this is expected to fail but we need to know what issues are there
npm_audit:
name: npm audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: npm audit
run: |
pushd tcms/
./npm-install
npm audit