falconpy/.github/workflows/bandit.yml at b9bcfba7bdb96f2695323851319d085bbfd290cb · alhumaw/falconpy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
name: Bandit

permissions:
  contents: read

on:
  push:
    paths:
      - '**.py'
    branches:
      - main
      - dev
      - samples
      - 'ver_*'
  pull_request:
    paths:
      - '**.py'
    branches:
      - main
      - dev
      - samples
      - 'ver_*'

jobs:
  analyze:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    permissions:
      contents: read
    steps:
    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0
      with:
        persist-credentials: false

    - name: Set up Python
      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
      with:
        python-version: '3.13'

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip==24.0
        python -m pip install bandit
        pip install -r requirements.txt

    - name: Analyze package with bandit
      run: |
        bandit -r src

    - name: Analyze samples with bandit
      run: |
        bandit -r samples