mirror of
https://github.com/placeholder-soft/chroma.git
synced 2026-01-12 08:44:18 +08:00
831c027f5c
## Description of changes *Summarize the changes made by this PR.* - Improvements & Bug fixes - Added bandit scanning for all pushes to repo ## Test plan *How are these changes tested?* Manual testing of the workflow ## Documentation Changes N/A - unless we want to start a separate security section in the main docs repo. --------- Co-authored-by: Hammad Bashir <HammadB@users.noreply.github.com>
29 lines
642 B
YAML
29 lines
642 B
YAML
name: Python Vulnerability Scan
|
|
on:
|
|
push:
|
|
branches:
|
|
- '*'
|
|
- '*/**'
|
|
paths:
|
|
- chromadb/**
|
|
- clients/python/**
|
|
workflow_dispatch:
|
|
jobs:
|
|
bandit-scan:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v3
|
|
- uses: ./.github/actions/bandit-scan/
|
|
with:
|
|
input-dir: '.'
|
|
format: 'json'
|
|
bandit-config: 'bandit.yaml'
|
|
output-file: 'bandit-report.json'
|
|
- name: Upload Bandit Report
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: bandit-artifact
|
|
path: |
|
|
bandit-report.json
|