Compare commits

..

2 Commits

Author SHA1 Message Date
192aee52f0 fix(deps): update dependency webex-bot to v1
Some checks failed
Enforce Conventional Commit PR Title / Validate PR Title (pull_request_target) Successful in 8s
CI / ci (pull_request) Failing after 42s
2025-06-06 19:16:05 +02:00
4c51e697d9 Update .gitea/workflows/ci.yml
Some checks failed
Security / sonarqube (push) Failing after 31s
Security / snyk (push) Successful in 1m0s
2025-06-06 19:15:51 +02:00

View File

@ -54,18 +54,38 @@ jobs:
- name: Minimize uv cache
run: uv cache prune --ci
- name: Set up environment for Snyk
run: |
uv pip freeze > requirements.txt
mv pyproject.toml pyproject.toml.bak
mv uv.lock uv.lock.bak
- name: SonarQube Scan
uses: SonarSource/sonarqube-scan-action@v5.2.0
env:
SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
- name: Snyk Vulnerability Scan
- name: Snyk SAST Scan
uses: snyk/actions/python@master
continue-on-error: true # Sometimes vulns aren't immediately fixable
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: snyk
args: test --all-projects
# command: snyk
args: snyk code test #--all-projects --exclude=.archive
# - name: SonarQube Scan
# uses: SonarSource/sonarqube-scan-action@v5.2.0
# env:
# SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
# SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
# - name: Snyk Vulnerability Scan
# uses: snyk/actions/python@master
# continue-on-error: true # Sometimes vulns aren't immediately fixable
# env:
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
# with:
# command: snyk
# args: test --all-projects
- name: Reverse set up environment for Snyk
run: |
rm -f requirements.txt
mv pyproject.toml.bak pyproject.toml
mv uv.lock.bak uv.lock