repos/roboluke
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Releases 51 Activity

fix(ci): Snyk environment fix
Some checks failed
Validate PR Title / validate (pull_request) Successful in 5s
Details
CI / ci (pull_request) Failing after 1m3s
Details

Browse Source
This commit is contained in:
Luke Tainton 2025-05-31 11:30:44 +01:00
parent 54c1fbfd4b
commit 44b35f7066
Signed by: luke
SSH Key Fingerprint: SHA256:D34npKT7UaiT/7gULqu7EPSLWWVAjTjXf4kKfJ/fQBo
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.gitea/workflows/ci.yml
View File

@ -64,9 +64,11 @@ jobs:
# SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }} # SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
# SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }} # SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
- name: Create requirements.txt for Snyk - name: Set up environment for Snyk
run: | run: |
uv pip freeze > requirements.txt uv pip freeze > requirements.txt
mv pyproject.toml pyproject.toml.bak
mv uv.lock uv.lock.bak
- name: Snyk SAST Scan - name: Snyk SAST Scan
uses: snyk/actions/python@master uses: snyk/actions/python@master
@ -84,6 +86,12 @@ jobs:
with: with:
command: test command: test
args: --all-projects --exclude=.archive args: --all-projects --exclude=.archive
- name: Reverse set up environment for Snyk
run: |
rm -f requirements.txt
mv pyproject.toml.bak pyproject.toml
mv uv.lock.bak uv.lock
# - name: Trivy Setup # - name: Trivy Setup
# uses: aquasecurity/setup-trivy@v0.2.0 # uses: aquasecurity/setup-trivy@v0.2.0
@ -113,4 +121,3 @@ jobs:
# ignore-unfixed: true # ignore-unfixed: true
# vuln-type: 'os,library' # vuln-type: 'os,library'
# severity: "CRITICAL,HIGH,MEDIUM" # severity: "CRITICAL,HIGH,MEDIUM"