diff --git a/.github/workflows/endor.yml b/.github/workflows/endor.yml index cb7bea4..5b2bb77 100644 --- a/.github/workflows/endor.yml +++ b/.github/workflows/endor.yml @@ -12,20 +12,12 @@ jobs: id-token: write # Used for keyless authentication with Endor Labs issues: write # Required to automatically comment on PRs for new policy violations pull-requests: write # Required to automatically comment on PRs for new policy violations - env: - ENDOR_SCAN_ENABLE_UV_PACKAGE_MANAGER: false runs-on: ubuntu-latest steps: - name: Checkout Repository uses: actions/checkout@v3 - name: Install pre-reqs run: pip install --user uv - - name: Generate requirements.txt - run: uv export --locked --no-editable --no-emit-local > requirements.txt - - name: Remove uv files which confuse Endor - run: rm uv.lock && rm pyproject.toml - - name: Install - run: pip install -r requirements.txt - name: Endor Labs Scan Pull Request if: github.event_name == 'pull_request' uses: endorlabs/github-action@v1.1.12 # Endor uses immutable releases so hash pinning not required