Skip to content

Commit

Permalink
FT-876: Added OSV vulnerability-scan job to the CI
Browse files Browse the repository at this point in the history
  • Loading branch information
Aryamanz29 committed Jan 2, 2025
1 parent 8abdb8a commit 4d630ef
Showing 1 changed file with 24 additions and 1 deletion.
25 changes: 24 additions & 1 deletion .github/workflows/pyatlan-pr.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,30 @@ on:
workflow_dispatch:

jobs:
vulnerability-scan:
strategy:
matrix:
python-version: [3.8, 3.9]

steps:
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}

- uses: pypa/[email protected]
with:
# Used pytest (library is in maintenance mode)
# We can ignore this vulnerability here
# Reference: https://github.com/pytest-dev/py
ignore-vulns: |
PYSEC-2022-42969
summary: true
vulnerability-service: osv
inputs: requirements.txt requirements-dev.txt

qa-checks-and-unit-tests:
needs: [vulnerability-scan]
runs-on: ubuntu-latest
outputs:
files: ${{ steps.distribute-integration-test-files.outputs.files }}
Expand Down Expand Up @@ -50,7 +73,7 @@ jobs:
echo "files=$json_files" >> $GITHUB_OUTPUT
integration-tests:
needs: [qa-checks-and-unit-tests]
needs: [vulnerability-scan, qa-checks-and-unit-tests]
runs-on: ubuntu-latest
strategy:
fail-fast: false
Expand Down

0 comments on commit 4d630ef

Please sign in to comment.