Bump bandit from 1.7.10 to 1.8.0 in the python group #1434
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: tests (unit) | |
on: | |
pull_request: {} | |
push: | |
branches: | |
- master | |
jobs: | |
test: | |
runs-on: ubuntu-latest | |
strategy: | |
max-parallel: 5 | |
matrix: | |
python-version: [3.9, '3.10', 3.11, 3.12, 3.13] | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Set up Python ${{ matrix.python-version }} | |
uses: actions/setup-python@v5 | |
with: | |
python-version: ${{ matrix.python-version }} | |
- name: Install dependencies | |
run: | | |
pip install --upgrade wheel setuptools | |
python setup.py develop | |
pip install -r requirements-test.txt | |
mypy --install-types --non-interactive puppetboard/ test/ | |
- name: Test | |
run: | | |
pytest --cov=. --cov-report=xml --strict-markers --mypy -v puppetboard test | |
pylint --errors-only puppetboard test | |
- name: Upload coverage to Codecov | |
uses: codecov/[email protected] | |
with: | |
token: ${{ secrets.CODECOV_TOKEN }} | |
fail_ci_if_error: true | |
build_docker_image: | |
name: 'Test building a container' | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
- name: Build Docker image | |
uses: docker/build-push-action@v6 | |
with: | |
context: . | |
push: false | |
security-tests: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Set up Python 3.13 | |
uses: actions/setup-python@v5 | |
with: | |
python-version: 3.13 | |
- name: Install dependencies | |
run: | | |
pip install bandit | |
- name: Run bandit | |
run: | | |
bandit -r puppetboard | |
tests: | |
needs: | |
- test | |
- build_docker_image | |
- security-tests | |
runs-on: ubuntu-latest | |
name: Test suite | |
steps: | |
- run: echo Test suite completed |