Skip to content

Release 1.0.10: Enhanced format detection, exception hierarchy, and d… #1

Release 1.0.10: Enhanced format detection, exception hierarchy, and d…

Release 1.0.10: Enhanced format detection, exception hierarchy, and d… #1

Workflow file for this run

name: Security
on:
push:
branches: [ main, master, develop ]
pull_request:
branches: [ main, master, develop ]
schedule:
# Run weekly on Monday at 6 AM UTC
- cron: '0 6 * * 1'
workflow_dispatch:
jobs:
security-scan:
runs-on: ubuntu-latest
name: Security Vulnerability Scan
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.11"
cache: 'pip'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install .[dev]
- name: Run Bandit security linter
run: |
bandit -r iterable -f json -o bandit-report.json -ll
continue-on-error: true
- name: Upload Bandit report
uses: actions/upload-artifact@v3
if: always()
with:
name: bandit-report
path: bandit-report.json
- name: Run pip-audit for dependency vulnerabilities
run: |
pip freeze > requirements-frozen.txt
pip-audit --requirement requirements-frozen.txt --desc
rm requirements-frozen.txt
continue-on-error: true
- name: Run Safety check
run: |
pip freeze > requirements-frozen.txt
safety check --file requirements-frozen.txt
rm requirements-frozen.txt
continue-on-error: true