mirror of
https://github.com/semantica-agi/semantica.git
synced 2026-08-29 04:26:20 +00:00
fix: Make dependency security scan non-blocking
This commit is contained in:
@@ -20,6 +20,7 @@ jobs:
|
||||
dependency-scan:
|
||||
name: Dependency Security Scan
|
||||
runs-on: ubuntu-latest
|
||||
continue-on-error: true
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
@@ -33,25 +34,27 @@ jobs:
|
||||
run: |
|
||||
python -m pip install --upgrade pip
|
||||
pip install safety pip-audit
|
||||
continue-on-error: true
|
||||
|
||||
- name: Install project dependencies
|
||||
run: |
|
||||
pip install -e ".[dev]"
|
||||
continue-on-error: true
|
||||
|
||||
- name: Run pip-audit
|
||||
run: |
|
||||
set +e
|
||||
pip-audit --format json --output pip-audit-report.json 2>&1 || echo "pip-audit scan completed"
|
||||
pip-audit 2>&1 || echo "pip-audit completed with findings"
|
||||
exit 0
|
||||
echo "Running pip-audit security scan..."
|
||||
pip-audit --format json --output pip-audit-report.json 2>&1 || true
|
||||
pip-audit 2>&1 || true
|
||||
echo "pip-audit scan completed"
|
||||
continue-on-error: true
|
||||
|
||||
- name: Run safety check
|
||||
run: |
|
||||
set +e
|
||||
safety check --json --output safety-report.json 2>&1 || echo "Safety check completed"
|
||||
safety check 2>&1 || echo "Safety check completed with findings"
|
||||
exit 0
|
||||
echo "Running safety security check..."
|
||||
safety check --json --output safety-report.json 2>&1 || true
|
||||
safety check 2>&1 || true
|
||||
echo "Safety check completed"
|
||||
continue-on-error: true
|
||||
|
||||
- name: Upload security reports
|
||||
|
||||
Reference in New Issue
Block a user