Add pip-audit support

swisstxt · Aug 18, 2023 · 2cab5ba · 2cab5ba
1 parent 5d56141
commit 2cab5ba
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
@@ -189,3 +189,15 @@ jobs:
  run: |
  cat "${{ steps.analysis.outputs.sarif-output }}/python.sarif"
  echo "${{ steps.analysis.outputs.sarif-id }}"
+ pip-audit:
+ runs-on: ubuntu-latest
+ steps:
+ - name: checkout repo
+ uses: actions/checkout@v3
+ with:
+ sparse-checkout: python/
+ - uses: pypa/[email protected]
+ with:
+ inputs: requirements.txt
+ # SARIF reports aren't supported by pip-audit yet:
+ # https://github.com/pypa/pip-audit/issues/206