Also run pip audit check on test depdendencies.
@@ -273,14 +273,22 @@ jobs:
source venv/bin/activate
python -m pip install .
- - name: Run Pip Audit Check
+ - name: Run Pip Audit Check On Main Library Dependencies
uses: ./.github/actions/gh-action-pip-audit/ # v1.0.0
with:
virtual-environment: venv/
- - name: Run Checks
+ - name: Cleanup
run: |
rm -rf venv/ || true
+
+ - name: Run Pip Audit Check On All Development And Test Dependencies
+ uses: ./.github/actions/gh-action-pip-audit/ # v1.0.0
+ with:
+ inputs: requirements-tests.txt requirements-lint.txt requirements-mypy.txt requirements-docs.txt
+
+ - name: Run Bandit Check
+ run: |
script -e -c "tox -e bandit"
micro-benchmarks:
