Skip to content

Commit

Permalink
chore(ci): add bandit sast scanning
Browse files Browse the repository at this point in the history
  • Loading branch information
l4rm4nd authored Jul 25, 2024
1 parent 8d6c082 commit a6d8dc8
Showing 1 changed file with 23 additions and 2 deletions.
25 changes: 23 additions & 2 deletions .github/workflows/docker-image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,9 +42,30 @@ jobs:
body: ${{ steps.changelog.outputs.clean_changelog }}
token: ${{ secrets.GITHUB_TOKEN }}

bandit:
name: SAST with Bandit
needs: changelog
if: github.event_name != 'pull_request' && needs.changelog.outputs.skipped == 'false'
runs-on: ubuntu-latest

steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: '3.x'

- name: Install Bandit
run: pip install bandit

- name: Run Bandit
run: bandit -r linkedindumper.py --severity-level medium

deploy:
name: Deploy Image
needs: changelog
needs: [changelog, bandit]
if: github.event_name != 'pull_request' && needs.changelog.outputs.skipped == 'false'
runs-on: ubuntu-latest

Expand Down Expand Up @@ -91,7 +112,7 @@ jobs:

release:
name: Release
needs: changelog
needs: [changelog, bandit]
if: github.event_name != 'pull_request' && needs.changelog.outputs.skipped == 'false'
runs-on: ubuntu-latest

Expand Down

0 comments on commit a6d8dc8

Please sign in to comment.