diff --git a/.gitea/workflows/sca.yml b/.gitea/workflows/sca.yml index bf212dd..08dfea5 100644 --- a/.gitea/workflows/sca.yml +++ b/.gitea/workflows/sca.yml @@ -9,30 +9,22 @@ on: jobs: pip-audit: runs-on: ubuntu-latest - defaults: - run: - shell: bash steps: - name: Checkout code - shell: bash run: | rm -rf repo git clone https://oauth2:${{ secrets.GITEA_TOKEN }}@git.akarkode.com/${{ gitea.repository }}.git repo - cd repo - git checkout ${{ gitea.sha }} + cd repo && git checkout ${{ gitea.sha }} - name: Install pip-audit - shell: bash run: pip3 install pip-audit - name: Run pip-audit scan - shell: bash run: | cd repo pip-audit -r Pipfile.lock || true - name: Fail on HIGH/CRITICAL - shell: bash run: | cd repo pip-audit -r Pipfile.lock --fail-on-severity high \ No newline at end of file