Add new GHA step which runs pip audit check.
@@ -201,6 +201,17 @@ jobs:
run: |
pip install "tox==3.24.4"
+ - name: Install Library Into Virtualenv
+ run: |
+ python -m venv venv/
+ source venv/bin/activate
+ python -m pip install .
+
+ - name: Run Pip Audit Check
+ uses: pypa/gh-action-pip-audit@cce88443a7a495d91316565f5cc077f815a8f1c7 # v1.0.0
+ with:
+ virtual-environment: venv/
+
- name: Run Checks
run: |
script -e -c "tox -e black-check,checks,import-timings,lint,pylint"
