diff --git a/.gitea/workflows/sca.yml b/.gitea/workflows/sca.yml index 6858342..bf212dd 100644 --- a/.gitea/workflows/sca.yml +++ b/.gitea/workflows/sca.yml @@ -9,20 +9,30 @@ on: jobs: pip-audit: runs-on: ubuntu-latest + defaults: + run: + shell: bash steps: - name: Checkout code + shell: bash run: | + rm -rf repo git clone https://oauth2:${{ secrets.GITEA_TOKEN }}@git.akarkode.com/${{ gitea.repository }}.git repo - cd repo && git checkout ${{ gitea.sha }} + cd repo + git checkout ${{ gitea.sha }} - name: Install pip-audit + shell: bash run: pip3 install pip-audit - name: Run pip-audit scan - working-directory: repo + shell: bash run: | + cd repo pip-audit -r Pipfile.lock || true - name: Fail on HIGH/CRITICAL - working-directory: repo - run: pip-audit -r Pipfile.lock --fail-on-severity high \ No newline at end of file + shell: bash + run: | + cd repo + pip-audit -r Pipfile.lock --fail-on-severity high \ No newline at end of file