File tree Expand file tree Collapse file tree 1 file changed +3
-30
lines changed
Expand file tree Collapse file tree 1 file changed +3
-30
lines changed Original file line number Diff line number Diff line change 11name : " Security Scan on PR"
2-
32on :
43 pull_request :
54 types : [opened, synchronize, reopened]
6- schedule :
7- - cron : ' 0 0 * * 1' # Weekly on Monday
8- workflow_dispatch :
9-
105jobs :
116 security_scan :
12- runs-on : self-hosted
13-
7+ runs-on : [self-hosted, linux, x64, big]
148 steps :
159 - name : Checkout code
1610 uses : actions/checkout@main
17-
18- - name : Set up Python
19- uses : actions/setup-python@v5
20- with :
21- python-version : ' 3.11'
22-
23- - name : Install Poetry
24- uses : snok/install-poetry@v1
25- with :
26- version : latest
27- virtualenvs-create : true
28- virtualenvs-in-project : true
29-
30- - name : Install dependencies
31- run : poetry install --with dev
32-
33- - name : Run Bandit Security Scan
34- run : poetry run bandit -r cdp/ generator/ -f txt
35-
3611 - name : Run CodeQL Scan
3712 uses : github/codeql-action/init@main
3813 with :
39- languages : ' python'
40-
14+ languages : ' python,javascript'
4115 - name : Perform CodeQL Analysis
42- uses : github/codeql-action/analyze@main
43-
16+ uses : github/codeql-action/analyze@main
You can’t perform that action at this time.
0 commit comments