File tree Expand file tree Collapse file tree 1 file changed +21
-20
lines changed
Expand file tree Collapse file tree 1 file changed +21
-20
lines changed Original file line number Diff line number Diff line change 4646 docker :
4747 - image : cimg/python:3.10
4848 steps :
49- - attach_workspace :
50- at : ~/project
5149 - checkout
50+ - restore_cache :
51+ keys :
52+ - v1-dependencies-{{ checksum "requirements.txt" }}
53+ - v1-dependencies-
5254 - run :
5355 name : Install Dependencies
5456 command : |
@@ -118,61 +120,60 @@ workflows:
118120 # Main workflow for all commits and PRs
119121 build_test_and_security :
120122 jobs :
121- # Build and test on every commit
122- - build_and_test
123-
124- # Security scans on every commit
123+ # Security scans run first in parallel
125124 - snyk-scan :
126125 context :
127126 - static-analysis
128- requires :
129- - build_and_test
130127
131128 - reversing-labs :
132129 context :
133130 - okta-dcp
131+
132+ # Build and test only after security scans pass
133+ - build_and_test :
134134 requires :
135- - build_and_test
135+ - snyk-scan
136+ - reversing-labs
136137
137138 # Publish workflow - only runs on master branch
138139 publish :
139140 jobs :
140- - build_and_test :
141+ # Security scans run first in parallel
142+ - snyk-scan :
143+ context :
144+ - static-analysis
141145 filters :
142146 branches :
143147 only : master
144148 tags :
145149 only : /^v.*/
146150
147- - snyk-scan :
151+ - reversing-labs :
148152 context :
149- - static-analysis
150- requires :
151- - build_and_test
153+ - okta-dcp
152154 filters :
153155 branches :
154156 only : master
155157 tags :
156158 only : /^v.*/
157159
158- - reversing-labs :
159- context :
160- - okta-dcp
160+ # Build and test only after security scans pass
161+ - build_and_test :
161162 requires :
162- - build_and_test
163+ - snyk-scan
164+ - reversing-labs
163165 filters :
164166 branches :
165167 only : master
166168 tags :
167169 only : /^v.*/
168170
171+ # Publish only after build and tests are successful
169172 - publish_to_pypi :
170173 context :
171174 - pypi-publish
172175 requires :
173176 - build_and_test
174- - snyk-scan
175- - reversing-labs
176177 filters :
177178 branches :
178179 only : master
You can’t perform that action at this time.
0 commit comments