From e0ffdf4846487f154cfef84e1d379129c410680b Mon Sep 17 00:00:00 2001 From: KaifAhmad1 Date: Mon, 24 Nov 2025 17:39:17 +0530 Subject: [PATCH] fix: Make dependency security scan non-blocking --- .github/workflows/security.yml | 19 +++++++++++-------- 1 file changed, 11 insertions(+), 8 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 66c65c3f..eebcb1ef 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -20,6 +20,7 @@ jobs: dependency-scan: name: Dependency Security Scan runs-on: ubuntu-latest + continue-on-error: true steps: - name: Checkout code uses: actions/checkout@v4 @@ -33,25 +34,27 @@ jobs: run: | python -m pip install --upgrade pip pip install safety pip-audit + continue-on-error: true - name: Install project dependencies run: | pip install -e ".[dev]" + continue-on-error: true - name: Run pip-audit run: | - set +e - pip-audit --format json --output pip-audit-report.json 2>&1 || echo "pip-audit scan completed" - pip-audit 2>&1 || echo "pip-audit completed with findings" - exit 0 + echo "Running pip-audit security scan..." + pip-audit --format json --output pip-audit-report.json 2>&1 || true + pip-audit 2>&1 || true + echo "pip-audit scan completed" continue-on-error: true - name: Run safety check run: | - set +e - safety check --json --output safety-report.json 2>&1 || echo "Safety check completed" - safety check 2>&1 || echo "Safety check completed with findings" - exit 0 + echo "Running safety security check..." + safety check --json --output safety-report.json 2>&1 || true + safety check 2>&1 || true + echo "Safety check completed" continue-on-error: true - name: Upload security reports