robust-python-demo/.github/workflows/security-python.yml at main · robust-python/robust-python-demo · GitHub

View runs

History

49 lines (41 loc) · 1.08 KB

Raw

# .github/workflows/security-python.yml

# See https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions

name: Check Python Code Security

on:

pull_request:

paths:

- "src/**/*.py"

- "tests/**/*.py"

- "noxfile.py"

- "pyproject.toml"

- "bandit.yml"

- ".ruff.toml"

- ".github/workflows/security-python.yml"

push:

branches:

- main

- master

paths:

- "src/**/*.py"

- "tests/**/*.py"

- "noxfile.py"

- "pyproject.toml"

- "bandit.yml"

- ".ruff.toml"

- ".github/workflows/security-python.yml"

workflow_dispatch:

jobs:

security-python:

name: Run Python Code Security Checks

runs-on: ubuntu-latest

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Install uv

uses: astral-sh/setup-uv@v6

- name: Set up Python

uses: actions/setup-python@v5

with:

python-version-file: ".github/workflows/.python-version"

- name: Run Python code security analysis

run: uvx nox -s security-python

robust-python-demo/.github/workflows/security-python.yml at main · robust-python/robust-python-demo · GitHub

Uh oh!

Expand file tree

Breadcrumbs

security-python.yml

Latest commit

History

Breadcrumbs

security-python.yml

File metadata and controls