|
6 | 6 | workflow_dispatch: |
7 | 7 |
|
8 | 8 | jobs: |
9 | | - fossa: |
10 | | - runs-on: ubuntu-latest |
11 | | - steps: |
12 | | - - uses: actions/checkout@v3 |
13 | | - - name: Set up Python ${{ matrix.python-version }} |
14 | | - uses: actions/setup-python@v4 |
15 | | - with: |
16 | | - python-version: 3.x |
17 | | - cache: 'pip' |
18 | | - cache-dependency-path: | |
19 | | - **/setup.cfg |
20 | | - **/requirements*.txt |
21 | | - - name: Install dependencies |
22 | | - run: | |
23 | | - python -m pip install --upgrade pip |
24 | | - python -m pip install -r requirements.txt |
25 | | - pip install setuptools wheel twine |
26 | | - - name: Build |
27 | | - run: python setup.py sdist bdist_wheel |
28 | | - - name: Run FOSSA scan and upload build data |
29 | | - uses: fossas/fossa-action@main |
30 | | - with: |
31 | | - api-key: ${{ secrets.FOSSA_API_KEY }} |
32 | | - branch: ${{ github.ref_name }} |
33 | | - - name: Run FOSSA tests |
34 | | - uses: fossas/fossa-action@main |
35 | | - with: |
36 | | - api-key: ${{ secrets.FOSSA_API_KEY }} |
37 | | - run-tests: true |
38 | | - |
39 | | - snyk: |
40 | | - runs-on: ubuntu-latest |
41 | | - steps: |
42 | | - - uses: actions/checkout@v3 |
43 | | - - name: Set up Python |
44 | | - uses: actions/setup-python@v4 |
45 | | - with: |
46 | | - python-version: 3.x |
47 | | - cache: 'pip' |
48 | | - cache-dependency-path: | |
49 | | - **/setup.cfg |
50 | | - **/requirements*.txt |
51 | | - - name: Install dependencies |
52 | | - run: | |
53 | | - python -m pip install --upgrade pip |
54 | | - python -m pip install -r requirements.txt |
55 | | - pip install setuptools wheel twine |
56 | | - - name: Build |
57 | | - run: python setup.py sdist bdist_wheel |
58 | | - - name: Run Snyk to check for vulnerabilities |
59 | | - env: |
60 | | - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} |
61 | | - run: | |
62 | | - npm install -g snyk |
63 | | - snyk auth $SNYK_TOKEN |
64 | | - snyk monitor |
65 | | -
|
66 | 9 | test: |
67 | 10 | runs-on: ubuntu-latest |
68 | 11 | strategy: |
|
93 | 36 | publish: |
94 | 37 | runs-on: ubuntu-latest |
95 | 38 | if: startsWith(github.ref, 'refs/tags/v') |
96 | | - needs: [test, fossa, snyk] |
| 39 | + needs: [test] |
97 | 40 |
|
98 | 41 | steps: |
99 | 42 | - uses: actions/checkout@v3 |
|
0 commit comments