ci: add bandit (sast)

derlin · Apr 12, 2022 · c889b52 · c889b52
1 parent 168b5a1
commit c889b52
Show file tree

Hide file tree

Showing 3 changed files with 142 additions and 2 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -43,7 +43,11 @@ jobs:
 
       - name: Check Style
         run: |
-          poetry run black --diff --check .
+          poetry run black --diff --check rickroll
+
+      - name: Check Common Vulnerabilities (SAST)
+        run: |
+          poetry run bandit -r rickroll
 
   build:
     if: ${{ !startsWith(github.event.head_commit.message, 'docs') }} # skip on documentation

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -16,3 +16,4 @@ Flask = "^2.1.0"
 
 [tool.poetry.dev-dependencies]
 black = "*"
+bandit = "^1.7.4"
Original file line number	Diff line number	Diff line change
Expand Up		@@ -16,3 +16,4 @@ Flask = "^2.1.0"

		[tool.poetry.dev-dependencies]
		black = "*"
		bandit = "^1.7.4"