--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Commit c03c5315eb7ef411d2dd3f67c60d848752cd3ff5
Parents : e8de428
Author : Sudo-Ivan <ivan@quad4.io>
Signature : Signature validation error
Date : 2026-02-23T19:49:18-06:00
Add pip-audit and pnpm audit steps to CI workflow
Changes
Diff
diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 4964a654..0e83f3f8 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -32,8 +32,12 @@ jobs:
run: pip install poetry
- name: Setup Python environment
run: task setup:be
+ - name: pip-audit
+ run: poetry run pip install pip-audit && poetry run pip-audit
- name: Install Node dependencies
run: task deps:fe
+ - name: pnpm audit
+ run: pnpm audit --audit-level=high
- name: Lint
run: |
set -o pipefail
@@ -57,6 +61,8 @@ jobs:
version: "3.46.3"
- name: Install dependencies
run: task deps:fe
+ - name: pnpm audit
+ run: pnpm audit --audit-level=high
- name: Determine version
id: version
run: |
@@ -111,6 +117,10 @@ jobs:
run: pip install poetry
- name: Install dependencies
run: task install
+ - name: pip-audit
+ run: poetry run pip install pip-audit && poetry run pip-audit
+ - name: pnpm audit
+ run: pnpm audit --audit-level=high
- name: Run language tests
run: |
set -o pipefail
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────