fix: Make dependency security scan non-blocking

This commit is contained in:
KaifAhmad1
2025-11-24 17:39:17 +05:30
parent c2032a242b
commit e0ffdf4846
+11 -8
View File
@@ -20,6 +20,7 @@ jobs:
dependency-scan:
name: Dependency Security Scan
runs-on: ubuntu-latest
continue-on-error: true
steps:
- name: Checkout code
uses: actions/checkout@v4
@@ -33,25 +34,27 @@ jobs:
run: |
python -m pip install --upgrade pip
pip install safety pip-audit
continue-on-error: true
- name: Install project dependencies
run: |
pip install -e ".[dev]"
continue-on-error: true
- name: Run pip-audit
run: |
set +e
pip-audit --format json --output pip-audit-report.json 2>&1 || echo "pip-audit scan completed"
pip-audit 2>&1 || echo "pip-audit completed with findings"
exit 0
echo "Running pip-audit security scan..."
pip-audit --format json --output pip-audit-report.json 2>&1 || true
pip-audit 2>&1 || true
echo "pip-audit scan completed"
continue-on-error: true
- name: Run safety check
run: |
set +e
safety check --json --output safety-report.json 2>&1 || echo "Safety check completed"
safety check 2>&1 || echo "Safety check completed with findings"
exit 0
echo "Running safety security check..."
safety check --json --output safety-report.json 2>&1 || true
safety check 2>&1 || true
echo "Safety check completed"
continue-on-error: true
- name: Upload security reports