fix(ci): improving the audit step to report and not to block #4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Codacy CI | |
on: | |
push: | |
branches: | |
- main | |
pull_request: | |
branches: | |
- main | |
jobs: | |
build: | |
runs-on: ubuntu-latest | |
services: | |
mysql: | |
image: mysql:5.7 | |
env: | |
MYSQL_ROOT_PASSWORD: uvlhub_root_password | |
MYSQL_DATABASE: uvlhubdb_test | |
MYSQL_USER: uvlhub_user | |
MYSQL_PASSWORD: uvlhub_password | |
ports: | |
- 3306:3306 | |
options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3 | |
steps: | |
- name: Checkout code | |
uses: actions/checkout@v4 | |
- name: Set up Python | |
uses: actions/setup-python@v5 | |
with: | |
python-version: "3.12" | |
- name: Install dependencies | |
run: | | |
python -m pip install --upgrade pip | |
pip install -r requirements.txt | |
- name: Check for outdated dependencies | |
run: | | |
pip list --outdated > outdated_dependencies.txt | |
- name: Show outdated dependencies | |
run: cat outdated_dependencies.txt | |
- name: Security audit with pip-audit | |
run: | | |
pip install pip-audit | |
pip-audit || true | |
- name: Upload coverage to Codacy | |
run: | | |
pip install codacy-coverage | |
coverage run -m pytest app/modules/ --ignore-glob='*selenium*' | |
coverage xml | |
python-codacy-coverage -r coverage.xml | |
env: | |
FLASK_ENV: testing | |
MARIADB_HOSTNAME: 127.0.0.1 | |
MARIADB_PORT: 3306 | |
MARIADB_TEST_DATABASE: uvlhubdb_test | |
MARIADB_USER: uvlhub_user | |
MARIADB_PASSWORD: uvlhub_password | |
CODACY_PROJECT_TOKEN: ${{ secrets.CODACY_PROJECT_TOKEN }} |